cyberpress

WordPress Service Worker Uses EtherHiding, ClickFix and Steganography to Deploy Amatera Stealer

The campaign has affected hundreds of WordPress websites. Attackers plant a rogue must-use plugin, named in the format ...
The Hacker News

Five Critical WordPress Plugin and Theme Flaws Enable Site Takeover or RCE

Critical flaws in WPMU DEV, Avada, TranslatePress, Pods, and GiveWP can enable admin takeover or remote code execution.

Critical Avada WordPress theme flaw enables zero-click RCE

A critical vulnerability chain in the popular Avada theme for WordPress can be exploited by an unauthenticated attacker to ...
Security Affairs

Critical GiveWP Flaw Lets Attackers Run Commands on WordPress Servers

A critical GiveWP flaw lets unauthenticated attackers execute server commands. Version 4.16.7.2 fixes the PHP object ...
GitHub

Antigravity + Gemini CLI OAuth Plugin for Opencode

gemini-3.1-pro-preview Gemini 3.1 Pro (preview, rollout-dependent) gemini-3.1-pro-preview-customtools Gemini 3.1 Pro Preview Custom Tools (preview, rollout-dependent) Add multiple Google accounts for ...