Elementor Pro Flaw Could Let Unauthenticated Attackers Upload PHP and Execute Code

The feed reports multiple critical vulnerabilities and active exploitation campaigns, including unauthenticated remote code execution in Elementor Pro and Forminator WordPress plugins, actively exploited flaws in Ray and other enterprise platforms, GitLab project deletion, MLflow SSRF credential theft, and compromises of Dahua devices. It also covers malware and espionage campaigns targeting governments, macOS users, RubyGems developers, WordPress sites, Microsoft cloud services, and AI-agent ecosystems. Overall, the reporting indicates significant risk across internet-facing applications, IoT