Unpatched Flaw in Discontinued Plugin Exposes WordPress Sites to Attacks
A stored cross-site scripting (XSS) vulnerability in the Contact Form 7 Datepicker WordPress plugin will not receive a patch, leaving websites exposed to attacks, WordPress security firm Defiant reports.
Read more: Unpatched Flaw in Discontinued Plugin Exposes WordPress Sites to Attacks
Story added 3. April 2020, content source with full text you can find at link above.