Vulnerabilities
Unauthenticated RCE Risk in Duplicator Plugins for WordPress Sites
Attackers can trigger remote code execution or file deletion via object injection flaws in Duplicator and Duplicator Pro versions prior to the latest releases.
Wordfence
Everything Firewall Scoop has reported about Wordfence: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
CVSS 9.8 Ghostscript Heap Overflow in PDFs Fixed in 10.08.0 Update by Artifex
Wordfence Argus identified a heap buffer overflow in Ghostscript that allows attackers to execute code on servers processing uploaded PDF documents.