BdThemes' compromised JSON feed exploits XSS in seven WordPress plugins, creating rogue admins and installing a PHP web shell without plugin updates.
Cloudflare announced a developer preview that lets any website enable a WebMCP (Web Model Context Protocol) interface with a ...