TECH NEWS

Unauthenticated RCE Flaws Could Expose 200,000+ WordPress Sites to Takeover

More than 200,000 WordPress websites are potentially exposed to takeover attacks via two critical-severity vulnerabilities in The Events Calendar plugin.

A highly popular plugin with over 600,000 active installations, The Events Calendar allows administrators to easily create and manage an events calendar on their websites.

All plugin versions before 6.17.3.1 are affected by two code injection bugs that could lead to remote code execution (RCE), allowing attackers to take over sites, WordPress security firm Defiant explains.

The first security defect, tracked as CVE-2026-78159 (CVSS score of 9.8), is described as an unauthenticated code injection caused by insufficient validation.

Under certain conditions, an attacker can inject a plain-array payload that bypasses checks and executes during the processing of single-event HTML, including the comment area.

StellarWP, The Events Calendar’s developer, patched the flaw on August 25 in version 6.17.3.1 of the plugin.

Advertisement. Scroll to continue reading.

Tracked as CVE-2026-78006 (CVSS...

Copyright of this story solely belongs to www.securityweek.com. To see the full text click HERE

https://www.itvoice.in/wp-content/uploads/2026/09/ITVoice-Feature-Image-93.jpg

BenQ Unveils New Workplace Solutions at InfoComm India 2026

BenQ, a global innovator in professional display and collaboration technology, showcased its latest enterprise portfolio at InfoComm India 2026, bringing together solutions designed around the changing needs of today’s workplace. As offices become increasingly hybrid and collaborative, the role of the display has moved beyond simply presenting information. Meetings

https://www.zdnet.com/wp-content/uploads/sites/3/DSC00614.jpeg

I’ve used both iPhone 18 Pro models – here’s how my buying advice is changing in 2026

Just a week ago, I was caught in a frenzy. As the doors opened to the iPhone demo room after Apple’s Surprise and Shine keynote, I couldn’t help but pause as dozens of journalists and media members rushed to get the very first hands-on photos of the iPhone

https://storage.ghost.io/c/0f/76/0f76b548-bc58-4f25-abc3-3f5ebca07da4/content/images/size/w1200/2026/09/FLOCK-04.jpg

Hacker collective stegan0gram dismantles a Flock camera, recovering an encryption key and showing it runs ~20 apps on a midrange smartphone-grade processor

Sponsor Posts Subquadratic: the LLM built for 12M-token reasoning — SubQ can reason across entire codebases and document sets in one pass with no RAG workarounds. Read how SubQ 1.1 Small holds near-perfect retrieval out to 12M tokens. Cloudflare Connect 2026: The Agentic Conference — Stop preparing for agents. Start running

https://www.cnet.com/wp-content/uploads/sites/2/aescape-massage.jpeg

A Robot Gave Me a Massage. Here’s What It Was Like on the Table

When I arrived at The Hoxton, a hotel in Downtown Los Angeles, there were two placards on the reception desk advertising what I was there for: an Aescape robot massage. As no stranger to back pain, I’ve had my fair share of massages, but never from a robot. Aescape,

Read more

BenQ Unveils New Workplace Solutions at InfoComm India 2026

I’ve used both iPhone 18 Pro models – here’s how my buying advice is changing in 2026

Hacker collective stegan0gram dismantles a Flock camera, recovering an encryption key and showing it runs ~20 apps on a midrange smartphone-grade processor

A Robot Gave Me a Massage. Here’s What It Was Like on the Table