最新报道:A critical vulnerability in the Wordfence WordPress plugin has exposed over 4 million websites to potential crypto theft through malicious ads and fake wallet prompts. Security researchers warn that hackers can inject harmful JavaScript code via the plugin's ad management feature, redirecting users to phishing sites or displaying fraudulent crypto transaction requests. The flaw allows attackers to bypass security checks by manipulating ad parameters. While Wordfence has released patches, experts urge website owners to immediately update to version 7.11.5 and audit any suspicious ad placements, as unpatched sites remain vulnerable to crypto-draining attacks.