WordPress users of miniOrange's Malware Scanner and Web Application Firewall plugins are being urged to delete them from their websites following the discovery of a critical security flaw.
The flaw, tracked as CVE-2024-2172, is rated 9.8 out of a maximum of 10 on the CVSS scoring system. It impacts the following versions of the two plugins -

Malware Scanner (versions <= 4.7.2)
Web



Source: TheHackerNews
Source Link: https://thehackernews.com/2024/03/wordpress-admins-urged-to-remove.html