tag: Plugin-Vulnerability · 2 items
- Engineer — Plan: Maximum-severity unauthenticated RCE in GiveWP is serious, but no KEV listing, public PoC, or active exploitation is confirmed in the signals; update GiveWP to the patched version this sprint and audit any WordPress instances running it.
- SOC/IR — Skip
- Leader — Skip
- Engineer — Plan: Update Elementor Pro to the patched version immediately; no active exploitation or PoC confirmed in signals, but RCE via file upload on a widely-deployed WordPress plugin warrants prompt patching within your normal critical window.
- SOC/IR — Skip
- Leader — Skip