Скачать или смотреть WordPress Security Alert: Hackers Exploit Critical Plugin Vulnerabilities

Critical vulnerabilities in WordPress plugins are being actively exploited by hackers. Wordfence has blocked over 8.7 million attack attempts targeting arbitrary plugin installation flaws. The vulnerabilities affect GutenKit and Hunk Companion, with over 40,000 and 8,000 active installations respectively. Both flaws allow unauthenticated attackers to install malicious plugins and execute remote code. The root cause lies in improperly configured REST API endpoints. Attackers are deploying sophisticated malicious payloads disguised as legitimate plugins. WordPress administrators must update to the latest versions and audit their plugin directories. Stay informed and protect your website from these critical threats.