Adobe Campaign, WordPress Login Bypass, and Gitea Code Injection
Adobe Campaign, WordPress Login Bypass, and Gitea Code Injection
Three CVSS 10.0 vulnerabilities landed in Adobe Campaign Classic within 24 hours, all enabling unauthenticated remote code execution. Attackers are actively exploiting an authentication bypass in the WordPress miniOrange SAML plugin that grants full administrator access without credentials. CISA has confirmed active exploitation of a Gitea code injection flaw that allows attackers with repository write access to execute arbitrary commands. This episode examines why these vulnerabilities matter to UK small businesses even when…
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.