Get all your news in one place.
100's of premium titles.
One app.
Start reading
TechRadar
TechRadar
Sead Fadilpašić

RARE PHOTOS: This popular wordpress security plugin has a worrying flaw which exposed user data | Rare Historical Photos

WordPress logo on mobile.
  • WordPress plugin flaw let low-privileged users access sensitive server files and credentials
  • CVE-2025-11705 affects plugin versions 4.23.81 and earlier; patch released October 15
  • About 50,000 sites remain vulnerable; admins urged to update immediately

A popular WordPress plugin with more than 100,000 active installations carried a bug that allowed threat actors to read any file on the server - including people’s emails and in some cases, passwords, too.

Sign up to read this article
Read news from 100's of titles, curated specifically for you.
Already a member? Sign in here
Related Stories
Top stories on inkl right now
One subscription that gives you access to news from hundreds of sites
Already a member? Sign in here
Our Picks
Fourteen days free
Download the app
One app. One membership.
100+ trusted global sources.