Blogs

Active exploitation of unauthenticated stored XSS vulnerabilities in WordPress Plugins

Fastly

Review active exploitation of stored XSS vulnerabilities in WordPress plugins, including CVE-2024-2194, CVE-2023-6961, and CVE-2023-40000.

Visit Site

AppSec in Q1 2025: Trends from Fastly's Latest ReportFastly Best DDoS Mitigation Providers - 2025/2026Fastly Healthcare Under DDoS Attack: SolutionsFastly HTTP Vary Header: Best PracticesFastly Next-Gen WAF for HAProxy 1.1.5 | Fastly DocumentationFastly Fixed action for cache settings | Fastly DocumentationFastly You can just ship agentsVercel Announcing Socket Certified Patches: One-Click Fixes for Vulnerable DependenciesSocket Storage Structure - bunny.net DocumentationBunny Large-Scale GitHub Actions Abuse Powers a Distributed cPanel and WHM Exploitation CampaignSocket Popular npm Packages in the keyv and Cacheable Namespaces Compromised in Active Supply Chain AttackSocket Biome Announces v2.0 Beta with Plugin System and Type Information SupportSocket Kubernetes SDKs from the PulumiversePulumi bunny.net WordPress CDN plugin is finally hereBunny runc container breakout vulnerabilities: A technical overviewCncf White House Launches Gold Eagle Initiative to Manage Surge in AI-Discovered VulnerabilitiesSocket Sink or Swim: Tackling 2024's Record-Breaking Vulnerability WaveAquasec PowerHell: Active Flaws in PowerShell Gallery Expose Users to AttacksAquasec The WordPress.com Business Plan is way more powerful than you thinkCss Tricks bunny.net Partners with Tutor LMS to Simplify eLearningBunny