Poster - CVE CyberSecurity Database News (Page 389)

Jan 2, 2025 CSRF WordPress Exploit

CVE-2023-45002 - How Missing Authorization in WP User Frontend Plugin Lets Attackers Take Control

WordPress is one of the world’s favorite Content Management Systems, but its popularity also makes it a target for hackers. Vulnerabilities in WordPress plugins

Jan 2, 2025 WordPress API Exploit PHP

CVE-2023-45101 - Exploiting “Missing Authorization” in Customer Reviews for WooCommerce (CusRev Plugin) – How Attackers Can Access and Modify Your Store Without Permission

CVE-2023-45101 is a critical security flaw discovered in the popular CusRev "Customer Reviews for WooCommerce" WordPress plugin. This bug, affecting all versions up

Jan 2, 2025 Exploit SQL

CVE-2025-22214 - Landray EIS 2001–2006 SQL Injection in fi_message_receiver.aspx?replyid – Explained and Exploited

A newly disclosed vulnerability has hit legacy deployments of Landray EIS enterprise software, versions 2001 through 2006. The flaw, assigned CVE-2025-22214, is an unauthenticated SQL

Jan 1, 2025 Exploit SQL PHP

CVE-2025-0168 - Critical SQL Injection in Job Recruitment 1.’s Feedback System (`/_parse/_feedback_system.php`)

A new critical vulnerability has shaken the world of PHP recruitment platforms in mid-2024. CVE-2025-0168 affects the open source project Job Recruitment 1. by code-projects.

Dec 31, 2024 Windows Exploit

CVE-2024-55955 - Privilege Escalation in Trend Micro Deep Security 20. Agents Explained

In June 2024, a new security vulnerability—CVE-2024-55955—was disclosed in Trend Micro Deep Security 20. agent software. This bug affects agent versions from 20.