Hackers Targeting Wordpress Sites Running The Onetone Theme To Exploit A Vulnerability Cybers Guards
Since the beginning of the month, the initiative has been going on and is still ongoing. A bug in OneTone, a common but now discontinued WordPress theme created by Magee WP, is a cross-site scripting vulnerability and is available in both a free and paid version. The XSS vulnerability allows an attacker to insert malicious code into the settings of the subject. The bug was found in September last year by NinTechNet’s Jerome Bruandet and confirmed to the thematic writer and WordPress team....