Alerts
Events
DCR
Explore Cyware Products
Alerts
Events
DCR
Go to listing page
Thousands of WordPress Sites at Risk Due to Critical Crawlomatic Plugin Vulnerability
Malware and Vulnerabilities
May 19, 2025
The Cyber Express
A critical vulnerability (CVE-2025-4389) in the Crawlomatic Multisite Scraper Post Generator WordPress plugin allows unauthenticated attackers to upload arbitrary files, leading to remote code execution.
Read More
CVE-2025-4389
WordPress Plugin Vulnerability
Crawlomatic
Remote Code Execution
Unauthenticated File Upload
Publisher
Previous
O2 UK patches bug leaking mobile user location from cal ...
Malware and Vulnerabilities
Next
How the Signal Knockoff App TeleMessage Got Hacked in 2 ...
Breaches and Incidents