@offseq.bsky.social on Bluesky

Post

OffSequence

offseq.bsky.social

did:plc:t5t6qep2vfipbi7f54demwev

CVE-2026-104748: CRITICAL in SimpleForm WordPress plugin (<=3.10.0) — unauthenticated attackers can create admin accounts via exposed AJAX endpoint. Disable or restrict plugin use until patched. https://radar.offseq.com/threat/cve-2026-104748-cwe-269-improper-privilege-management-in-wpazleen-simp... https://radar.offseq.com/threat/cve-2026-104748-cwe-269-improper-privilege-management-in-wpazleen-simpleform-form-maker-to-chat-apps-e30303ee252058a1

2026-10-14T10:30:28.457Z

Enable JavaScript to use Bluesky.

Learn more about Bluesky at bsky.social and atproto.com.