Aggregator

Critical WPML Plugin Flaw Exposes WordPress Sites to Remote Code Execution

The Hackers News
10 months 1 week ago
A critical security flaw has been disclosed in the WPML WordPress multilingual plugin that could allow authenticated users to execute arbitrary code remotely under certain circumstances. The vulnerability, tracked as CVE-2024-6386 (CVSS score: 9.9), impacts all versions of the plugin before 4.6.13, which was released on August 20, 2024. Arising due to missing input validation and sanitization,
The Hacker News

工信部通报17款涉嫌侵害用户权益的APP

嘶吼
10 months 1 week ago

工业和信息化部依据《个人信息保护法》《网络安全法》《电信条例》《电信和互联网用户个人信息保护规定》等法律法规，持续整治APP侵害用户权益的违规行为。

近期，工业和信息化部组织第三方检测机构进行抽查，共发现17款APP及SDK存在侵害用户权益行为，已予以通报。文中所述APP及SDK应按有关规定进行整改，整改落实不到位的，将依法依规组织开展相关处置工作。你的手机里是否也有安装如下软件？若有，速速卸载！

工信部通报存在问题的APP（SDK）名单

文章来源自：北京发布 工信部官网

胡金鱼

Managed ad