A severe vulnerability in the WordPress plugin SureTriggers, affecting over 100,000 installations, was exploited just four hours after its April 10, 2025 disclosure. It allows unauthenticated attackers to create admin accounts via a flaw in the plugin’s REST API. Users are urged to update the plugin or disable it immediately to prevent exploitation.

Ways to ward off hackers
Jeffrey Bowie was arrested for trying to install malware into computers at SSM St. Anthony’s Hospital, Oklahoma City. Tech consulting firm Coffey & Consult noted