WordPress security plugin exposes private data to site subscribers
From BleepingComputer to All on Wed Oct 29 16:51:27 2025
The Anti-Malware Security and Brute-Force Firewall plugin for WordPress, installed on over 100,000 sites, has a vulnerability that allows subscribers to read any file on the server, potentially exposing private information. [...]