VulnHub

Real-time Cybersecurity News

High

WordPress Adds Automated Plugin Reviews to Block High-Risk Updates Before Distribution

The Hacker News
Update

Overview

WordPress is implementing an automated security review process for all plugin updates before they are distributed via the WordPress.org update API. Previously, only new plugins underwent a review, leaving updates vulnerable to potential security risks. This change aims to analyze each update for security issues, ensuring that users receive safer versions of plugins. David Perez from WordPress stated that this initiative is crucial as updates are continuously released, which could introduce risks if not properly vetted. By enhancing the security review process, WordPress seeks to protect its vast user base from potential threats associated with plugin vulnerabilities.

Key Takeaways

  • Affected Systems: WordPress plugins
  • Action Required: Automated security review for every plugin update.
  • Timeline: Newly disclosed

Original Article Summary

WordPress has announced it's launching an automated security review for every release of a plugin before it's distributed through the WordPress.org update API so as to analyze it for potential security issues and ensure there are no risks involved. "New plugins are reviewed before they enter the directory, but updates ship continuously after that," David Perez, WordPress Official Plugin

Impact

WordPress plugins

Exploitation Status

No active exploitation has been reported at this time. However, organizations should still apply patches promptly as proof-of-concept code may exist.

Timeline

Newly disclosed

Remediation

Automated security review for every plugin update

Additional Information

This threat intelligence is aggregated from trusted cybersecurity sources. For the most up-to-date information, technical details, and official vendor guidance, please refer to the original article linked below.

Related Topics: This incident relates to Update.

Read Original Article

Related Coverage

Cisco Secure Email Gateway Flaw Exploited in the Wild, Enables Root Command Execution

The Hacker News

Cisco has issued a warning about a serious vulnerability in its AsyncOS software for the Cisco Secure Email Gateway, identified as CVE-2026-76461. This flaw, which has a CVSS score of 9.8, allows unauthenticated remote attackers to execute root commands due to insufficient validation in the email parsing logic. The vulnerability is currently being exploited in the wild, putting users at significant risk. Organizations using affected versions of the Cisco Secure Email Gateway should take immediate action to protect their systems. This incident underscores the importance of timely updates and vigilance in cybersecurity practices.

Sep 15, 2026

Homebrew 7.0.0 is out, here’s what changed for security

Help Net Security

Homebrew, a popular package manager for macOS and Linux, released version 7.0.0 on Sunday, addressing eight security vulnerabilities in the process. The most critical issue involved a flaw that allowed unsigned removal metadata for casks—Homebrew's method for installing prebuilt applications—to execute commands with elevated privileges (sudo). To mitigate this risk, the development team removed the vulnerable recovery code and the related API accessors that could be exploited. This update is particularly important for developers who rely on Homebrew for managing their software installations, as it helps protect their systems from potential abuse. Users are encouraged to update to the latest version to safeguard against these vulnerabilities.

Sep 15, 2026

Japan's Digital Agency says VPN flaw exposed 246,000 personnel records

BleepingComputer

Japan's Digital Agency has reported a significant data breach affecting around 246,000 records containing sensitive personal information of government employees. The breach is linked to a flaw in a Virtual Private Network (VPN), which allowed unauthorized access to these records. This incident raises concerns about the security of government digital infrastructure and the potential for misuse of the exposed data. With personal information at risk, affected individuals may face identity theft or other privacy violations. The agency is urging immediate action to address the vulnerability and protect sensitive information moving forward.

Sep 14, 2026

Maximum Severity GitLab Flaw Puts Supply Chains at Risk

darkreading

A severe vulnerability identified as CVE-2026-85706 has been discovered in both the GitLab Community Edition and Enterprise Edition. This flaw is categorized as a path traversal vulnerability and carries a maximum CVSS score of 10 out of 10, indicating its potential for serious exploitation. Organizations using affected versions of GitLab could see significant risks to their software supply chains, as attackers could exploit this vulnerability to access sensitive files and data. Companies using these GitLab instances are urged to take immediate action to protect their systems and data. The urgency of addressing this issue is underscored by the potential for attackers to exploit it in real-world scenarios, putting countless users and organizations at risk.

Sep 14, 2026

3BB Attacker Used MeshCentral Backdoor for Root Access, Targeted Subscriber Credentials

The Hacker News

An attacker gained unauthorized access to the network of 3BB, a major broadband provider in Thailand, using a legitimate remote management tool called MeshCentral. This allowed the attacker to maintain control over internal machines and potentially harvest subscriber credentials. The breach was discovered by the cybersecurity firm Hunt.io, which found an exposed server containing the attacker’s tools and a list of compromised data. This incident raises concerns about the security of management tools and the potential for attackers to exploit legitimate software for malicious purposes. Users of 3BB and similar services should be vigilant about their account security and monitor for any suspicious activity.

Sep 14, 2026

New DDRop Attack Breaks Intel TDX and AMD SEV-SNP Confidential Computing

The Hacker News

Researchers have identified a new hardware attack named DDRop that compromises memory protection in Intel and AMD's confidential computing systems. This attack allows an unauthorized user, who already has control over the server's software, to manipulate memory writes. By inserting a small circuit, the attacker can cause the processor to read outdated encrypted data as if it were current. This vulnerability poses significant risks for organizations relying on Intel TDX and AMD SEV-SNP technologies for secure computing, as it undermines the confidentiality of sensitive data. Companies using these systems should be aware of the potential for exploitation and take action to secure their environments.

Sep 14, 2026