ThreatVectr
Tag

#PHP object injection

1 story taggedPHP object injection.

Full-frame close-up of a dark server room aisle, rows of black rack-mounted machines with faint green and amber status LEDs, one open server tray showing a bare
Vulnerabilities

Donation plugin flaw hands attackers full control of 100,000 WordPress sites

A maximum-severity bug in GiveWP lets anyone create an account and run commands on the server. The fix landed in version 4.16.7.2 on August 27.

3 min read
© 2026 Threat Vectr