Popular website plugin harboured a serious 0-day for years

The flaw in the popular file uploader allows an attacker to upload files and run their own command line shell on any affected server.

from Naked Security https://ift.tt/2PNvCHU
via https://ifttt.com/ IFTTT