CVE Brief@DailyCVEBrief
Active Exploitation
LOOK BACK — In 2016, a WordPress plugin hot-loaded its core JS from an S3 bucket instead of bundling it. Nine years later the vendor was gone, the bucket was up for grabs — and someone took it. CVE-2025-8047: a 9.8 supply-chain backdoor that needed no exploit code. https://t.co/zECQPjWMlW
Post summary
The tweet announces CVE‑2025‑8047, a 9.8‑score supply‑chain backdoor in a WordPress plugin’s S3 bucket, and reports that the backdoor is already in use without requiring an exploit.
1000084
18 followersView on X