Vulnerability Bulletins

Episode 118: Four Android Vulnerabilities Under Active Attack


System information

   
Affected software Wordpress

Description

Four memory corruption vulnerabilities are being actively exploited on Android devices and nearly 2 dozen popular Android apps exposed over 100 Million users’ sensitive information in cloud databases. Over 600,000 sites using WP Statistics required a patch to fix a blind SQL injection vulnerability. WP User Avatar undergoes a dramatic rebranding to ProfilePress, adding completely […]

More info:

https://www.wordfence.com/blog/2021/05/episode-118-four-android-vulnerabilities-under-active-attack/

Standar resources

Property Value
CVE

Version history

Version Comments Date
1.0 Advisory issued 2021-05-26
Ministerio de Defensa
CNI
CCN
CCN-CERT