Attackers are exploiting a critical-severity privilege escalation vulnerability (CVE-2025-8489) in the King Addons for Elementor plugin for WordPress, which lets them obtain administrative permissions ...
OpenAI patched a command injection flaw in its Codex CLI tool that let attackers run arbitrary commands on developer machines ...