Hackers exploit YOOtheme Pro vulnerability CVE-2026-102785 (CVSS 10) for remote code execution, dropping webshells. Update to 5.0.53 now.
#YOOtheme #YOOthemePro #CVE2026102785 #RCE #Webshell #Joomla #WordPress #Unit42 #ActiveExploitation
#YOOtheme #YOOthemePro #CVE2026102785 #RCE #Webshell #Joomla #WordPress #Unit42 #ActiveExploitation
YOOtheme Pro Vulnerability CVE-2026-102785 (CVSS 10) Exploited for Remote Code Execution
TL;DR Attackers are exploiting CVE-2026-102785, a YOOtheme Pro vulnerability that scores the maximum 10.0 on CVSS 4.0. Palo Alto Networks Unit 42 confirmed in-the-wild attacks on October 26. The flaw gives unauthenticated attackers remote code execution on the web server. A flaw in YOOtheme Pro's image handler lets anyone write a PHP webshell to a public folder. Automated scanners began dropping webshells two days after the patch shipped.
securityonline.info
October 27, 2026 at 3:04 PM
Hackers exploit YOOtheme Pro vulnerability CVE-2026-102785 (CVSS 10) for remote code execution, dropping webshells. Update to 5.0.53 now.
#YOOtheme #YOOthemePro #CVE2026102785 #RCE #Webshell #Joomla #WordPress #Unit42 #ActiveExploitation
#YOOtheme #YOOthemePro #CVE2026102785 #RCE #Webshell #Joomla #WordPress #Unit42 #ActiveExploitation
Attenzione! Aggiornamento di sicurezza critico per #YOOthemePRO!
Aggiornare ASAP: yootheme.com/changelog
#joomla #security #cybersecurity
Aggiornare ASAP: yootheme.com/changelog
#joomla #security #cybersecurity
YOOtheme Pro Changelog
See the developer changelog for the full list of improvements, changes and bug fixes.
yootheme.com
August 22, 2026 at 1:43 PM
Attenzione! Aggiornamento di sicurezza critico per #YOOthemePRO!
Aggiornare ASAP: yootheme.com/changelog
#joomla #security #cybersecurity
Aggiornare ASAP: yootheme.com/changelog
#joomla #security #cybersecurity