Hackers exploit OttoKit WordPress plugin flaw to add admin accounts

Published on May 7, 2025

Hackers are exploiting a critical unauthenticated privilege escalation vulnerability in the OttoKit WordPress plugin to create rogue admin accounts on targeted sites. [...]

Continue reading on website
Other news

Play ransomware exploited Windows logging flaw in zero-day attacks

May 7, 2025
The Play ransomware gang has exploited a high-severity Windows Common Log File System flaw in zero-day attacks to gain SYSTEM privileges and deploy malware on compromised systems. [...]

CoGUI phishing platform sent 580 million emails to steal credentials

May 7, 2025
A new phishing kit named 'CoGUI' sent over 580 million emails to targets between January and April 2025, aiming to steal account credentials and payment data. [...]