Urgent Cyber Threats: WordPress and Cisco Vulnerabilities

In today’s episode, Corrine highlights critical vulnerabilities affecting WordPress plugins and Cisco Unified Communications Manager. Two WordPress plugins, Invoice Generator and SignUp & SignIn, are vulnerable to attacks that could compromise admin accounts. With a CVSS score of 9.8, these flaws pose serious risks, allowing attackers to reset passwords without verification. Additionally, a Cisco flaw, actively exploited, endangers communication infrastructures by enabling file manipulation. Corrine emphasises the importance of timely updates and strong cybersecurity practices to safeguard business data and reputation. Stay informed and proactive to turn these security challenges into a competitive advantage.

Chapters

• Intro Corrine introduces critical vulnerabilities in WordPress and Cisco impacting UK small businesses.
• WordPress Plugin Vulnerabilities Exploration of vulnerabilities in WordPress plugins with CVSS scores of 9.8, stressing the need for immediate updates.
• CTA Encouragement to follow the podcast, leave reviews, and share with others who might benefit from this information.
• Cisco Unified CM Flaw Highlighting the active exploitation of Cisco Unified Communications Manager, urging prompt security patching.
• Why This Matters Discussion on how cybercriminals target small businesses and the broader implications of unpatched systems.
• Competitive Advantage Turning proactive cybersecurity practices into a competitive edge for businesses.
• Selling Points to Your Board Key points to communicate to boards regarding risk management, cost efficiency, and reputation.
• Actionable Recommendations Steps for securing business systems: updates, two-factor authentication, vulnerability scans, and team communication.
• Outro Conclusion with a reminder to stay vigilant and address vulnerabilities promptly.

Links

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-12416
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-12417
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-20230