A popular security plugin for WordPress, known as “All-In-One Security (AIOS) – Security and Firewall,” has been found to store users’ passwords in plain text within the database.

Google is alerting organizations about a zero-day vulnerability in Zimbra mail servers currently being exploited. While a security update is not yet available, there is a fix that administrators need to implement manually. Zimbra acknowledged the issue in a security bulletin, but they did not report any active exploitation of the vulnerability. Google’s Maddie Stone

European internet users can no longer access Meta’s Twitter clone Threads through a VPN. While Threads is not available in the EU, bypassing this restriction using a VPN was possible. However, Meta has now blocked access for European VPN users as well.

Thousands of WordPress sites are vulnerable to takeover through a critical flaw in a widely used user registration plugin. Although the developer has released an update, most websites have not yet installed it. The vulnerability resides in the User Registration plugin, which allows WordPress sites to customize user registration pages and create user profile pages.