ThreatVectr
Tag

#cross-site scripting

2 stories taggedcross-site scripting.

A WordPress admin dashboard displaying installed plugins including Element Pack, a hidden admin account notification visible in a suspicious log entry, maliciou
Vulnerabilities

Hackers hijacked BdThemes WordPress plugins to quietly create secret admin accounts

A poisoned promotional feed pushed malicious code to admin dashboards, spawning hidden accounts on sites running Element Pack and other BdThemes plugins.

3 min read
A business email server room with technicians performing emergency maintenance and applying patches, with Zimbra interface screens visible displaying the comman
Vulnerabilities

Zimbra Patches Six Security Flaws, Including a Bug That Lets Strangers Run Commands on Your Email Server

The business email platform Zimbra has released a batch of fixes covering a serious command-injection flaw and five other vulnerabilities. No attacks in the wild have been confirmed, but the company is urging every customer to update immediately.

3 min read
© 2026 Threat Vectr