WordPress Updates More Than a Million Sites to Fix Critical Ninja Forms Vulnerability - Infosecurity Magazine

The code injection vulnerability allowed attackers to call methods in various Ninja Forms classes

Content management system (CMS) provider WordPress has forcibly updated over a million sites to patch a critical vulnerability affecting the Ninja Forms plugin. The flaw was spotted by the Wordfence… [+1762 chars]

full article...