🚨Hackers Exploit WordPress Vulnerabilities on Tens of Millions of Sites
Tens of millions of sites at risk from critical WordPress flaws
TL;DR
Hackers are exploiting critical security vulnerabilities in tens of millions of WordPress websites. Immediate updates urged to prevent full remote control.
Hackers have begun exploiting two critical security flaws in WordPress versions 6.9.0 through 7.0.1, affecting an estimated 90 million sites. This is a major concern for website owners and developers as attackers can gain full remote access. Immediate updates are essential to prevent further damage. The vulnerabilities were patched last week, but less than 15% of affected sites have updated yet.
Key Points
Two critical security flaws in WordPress versions 6.9.0-7.0.1 are being actively exploited by hackers, affecting up to 90 million sites.
WordPress has enabled forced updates for the most severe vulnerabilities, but less than 15% of affected websites have updated yet.
Cybersecurity firms Patchstack, Hexastrike, and WatchTowr warn that attacks are already underway in the wild, exploiting paired bugs to gain full control.
Cloudflare is blocking attack attempts against vulnerable WordPress sites, helping mitigate some of the immediate risks for users.
One critical bug dubbed WP2Shell allows hackers to take full remote control over affected websites when combined with another flaw.
Why It Matters
If you manage a WordPress site running versions 6.9.0-7.0.1, your security is compromised until you update immediately. The risk of total control by attackers is real and urgent.
Frequently Asked Questions
Why does this matter?
If you manage a WordPress site running versions 6.9.0-7.0.1, your security is compromised until you update immediately. The risk of total control by attackers is real and urgent.
What happened?
Hackers are exploiting critical security vulnerabilities in tens of millions of WordPress websites. Immediate updates urged to prevent full remote control.
Comments
Be the first to comment
Enjoyed this article?
Get it daily. 7am. Free. Reads in 5 minutes.