WordPress plugin can be exploited to run PHP commands on the server by posting a comment that contains a malicious payload.
CISA has ordered agencies to patch the FortiWeb web application firewall within seven days after news of exploits emerged.
The task is automatically passed to a higher-privileged “Data Retrieval Agent”, which interprets the request as legitimate ...