🚨 ACTIVE EXPLOITATION
- BdThemes WordPress Plugins Hit by Supply-Chain Attack
A supply-chain attack compromised BdThemes WordPress plugins through a poisoned API response.
- The incident affects users of BdThemes WordPress plugins.
- All BdThemes plugins were reportedly impacted.
- The attack poisoned promotional-banner API responses served from a cloud bucket in the WordPress admin backend. 📎 Coverage: wordfence.com · 👁 via @campuscodi@mastodon.social
🔓 CVEs & KEV
- CVE-2026-71993 — CVSS 9.3 — MSI Radix AXE6600 v781521 Command Injection via openvpn functionMSI Radix AXE...
- CVE-2026-71992 — CVSS 9.3 — MSI Radix AXE6600 v781521 Command Injection via macfilterMSI Radix AXE6600 ro...
- CVE-2026-71991 — CVSS 9.3 — MSI Radix AXE6600 v781521 Command Injection via TelnetSSH FunctionMSI Radix A...
- CVE-2026-71990 — CVSS 9.3 — MSI Radix AXE6600 v781521 Command Injection via TelnetSSH FunctionMSI Radix A...
- CVE-2026-71989 — CVSS 9.3 — MSI Radix AXE6600 v781521 Command Injection via porTrigger functionMSI Radix ...
- CVE-2026-71988 — CVSS 9.3 — MSI Radix AXE6600 v781521 Command Injection via portFw functionMSI Rad6...
- CVE-2026-71987 — CVSS 9.3 — MSI Radix AXE6600 v781521 Command Injection via alg functionMSI Radix AXE6600...
- CVE-2026-71986 — CVSS 9.3 — MSI Radix AXE6600 v781521 Command Injection via dmz FunctionMSI Radix AXE6600...
- CVE-2026-71985 — CVSS 9.3 — MSI Radix AXE6600 v781521 Command Injection via accesscontrol FunctionMSI Rad...
- CVE-2026-71984 — CVSS 9.3 — MSI Radix AXE6600 v781521 Command Injection via urlfilterMSI Radix AXE6600 ro...
- CVE-2026-71983 — CVSS 9.3 — MSI Radix AXE6600 v781521 Command Injection via wps.cgiMSI Radix AXE6600 rout...