Post
Pulse WP
pulse-wp.com
did:plc:m7puovzqhxurz66hip2xwfs6
BuddyBoss App up to 3.2.1: arbitrary file upload. No auth needed. Attackers read wp-config, steal DB credentials, plant shells.
CVSS 8.8. CVE-2026-76124.
Update to 3.2.1 now.
Scan your WordPress site: pulse-wp.com
#WordPress #RCE #CyberSecurity
2026-11-04T00:00:10.170Z