Latest Tech News

Stay updated with the latest in technology, AI, cybersecurity, and more

Filtered by: plugin Clear Filter

WordPress Gravity Forms developer hacked to push backdoored plugins

The popular WordPress plugin Gravity Forms has been compromised in what seems a supply-chain attack where manual installers from the official website were infected with a backdoor. Gravity Forms is a premium plugin for creating contact, payment, and other online forms. Based on statistic data from the vendor, the product is isntalled on around one million websites, some belonging to well-known organizations like Airbnb, Nike, ESPN, Unicef, Google, and Yale. Remote code execution on the server

How I used ChatGPT to analyze, debug, and rewrite a broken plugin from scratch - in an hour

NiroDesign/Getty Images I am not a morning person, yet my alarm goes off at 5:30 am every day. This is because the editorial team I work with is on the East Coast, and I'm in Oregon. I do a quick check of email and Slack to make sure nothing is on fire, then settle down to a relaxed first cup of coffee. Once caffeinated, I'm fairly gruntled. Unfortunately, one day in early June, my website was, at least figuratively, on fire. My hosting provider sent me a notice telling me that one of the plug

Topics: ai code plugin site spam

How I used ChatGPT to quickly fix a critical plugin - without touching a line of code

PM Images / Getty Images I am not a morning person, yet my alarm goes off at 5:30 am every day. This is because the editorial team I work with is on the East Coast, and I'm in Oregon. I do a quick check of email and Slack to make sure nothing is on fire, then settle down to a relaxed first cup of coffee. Once caffeinated, I'm fairly gruntled. Unfortunately, one day in early June, my website was, at least figuratively, on fire. My hosting provider sent me a notice telling me that one of the plu

Topics: ai code plugin site spam

How I used ChatGPT to quickly fix a critical open-source plugin - without touching a line of code

PM Images / Getty Images I am not a morning person, yet my alarm goes off at 5:30 am every day. This is because the editorial team I work with is on the East Coast, and I'm in Oregon. I do a quick check of email and Slack to make sure nothing is on fire, then settle down to a relaxed first cup of coffee. Once caffeinated, I'm fairly gruntled. Unfortunately, one day in early June, my website was, at least figuratively, on fire. My hosting provider sent me a notice telling me that one of the plu

Topics: ai code plugin site spam

Forminator plugin flaw exposes WordPress sites to takeover attacks

The Forminator plugin for WordPress is vulnerable to an unauthenticated arbitrary file deletion flaw that could enable full site takeover attacks. The security issue is tracked as CVE-2025-6463 and has a high-severity impact (CVSS 8.8 score). It impacts all versions of Forminator up to 1.44.2. Forminator Forms is a plugin developed by WPMU DEV. It offers a flexible, visual drag‑and‑drop builder to help users create and embed a wide range of form-based content on WordPress sites. According to

Show HN: ToplingDB - A Persistent Key-Value Store for External Storage

ToplingDB: A Persistent Key-Value Store for External Storage ToplingDB is developed and maintained by Topling Inc. It is built with RocksDB. See ToplingDB Branch Name Convention. ToplingDB's submodule rockside is the entry point of ToplingDB, see SidePlugin wiki. ToplingDB has much more key features than RocksDB: SidePlugin enables users to write a json(or yaml) to define DB configs Embedded Http Server enables users to view almost all DB info on web, this is a component of SidePlugin Embedd