WordPress Backdoors and SharePoint Exploits: Two Preventable Threats
WordPress Backdoors and SharePoint Exploits: Two Preventable Threats
Two critical vulnerabilities demand immediate attention from UK small businesses. WordPress plugins Fluent Forms Pro and Ninja Tables Pro were distributed with backdoored updates that bypass authentication, establish hidden API endpoints, and persist even after plugin removal (CVE-2026-73532 and CVE-2026-73533, both rated CVSS 9.8). Separately, Microsoft SharePoint faces active exploitation after proof-of-concept code emerged for an authentication bypass vulnerability (CVE-2026-55040), which when combined with CVE-2026-63520…
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.