Unpatched Flaw in Discontinued Plugin Exposes WordPress Sites to Attacks

A stored cross-site scripting (XSS) vulnerability in the Contact Form 7 Datepicker WordPress plugin will not receive a patch, leaving websites exposed to attacks, WordPress security firm Defiant reports.

read more

Read more: Unpatched Flaw in Discontinued Plugin Exposes WordPress Sites to Attacks

Story added 3. April 2020, content source with full text you can find at link above.