A critical remote code execution vulnerability (CVE-2025-6389) in the Sneeit Framework plugin for WordPress is being actively exploited in the wild. The vulnerability affects all versions prior to and including 8.3, with a CVSS score of 9.8. The issue has been patched in version 8.4 released on August 5, 2025. The plugin has more than 1,700 active installations. The article also mentions ICTBroadcast bug fueling Frost Botnet attacks, indicating multiple ongoing security threats.