Two of this week's five critical WordPress flaws (GiveWP, CVSS 10.0, and Avada) don't just take over the site, they run code on the hosting server. All five are unauthenticated. Patch now. https://suriq.io/blog/wordpress-five-critical-plugin-theme-flaws-server-rce #CVE #CloudSecurity #infosec #cybersecurity