# Single HTTP Request Can Exploit 6M WordPress Sites

- Link: https://www.widthness.com/single-http-request-can-exploit-6m-wordpress-sites/
- Published: 2024-10-10T09:00:59-05:00
- Author: Curated by John Wysocki

Image source: Primakov via Shutterstock. Article by Elizabeth Montalbano. Dark Reading – October 7, 2024. A WordPress plug-in installed more than 6 million times is vulnerable to a cross-site scripting flaw (XSS) that allows attackers to escalate privileges and potentially install malicious code to enable redirects, ads, and other HTML payloads onto an affected website. A security researcher who goes […] Click here to view original web page at www.darkreading.com Curated by John Wysocki See Full Bio