Exploit - CVE CyberSecurity Database News (Page 241)

Jan 2, 2025 XSS Exploit

CVE-2024-12907 - Reflected XSS Exploit in Kentico CMS 7's Access Denied Page

A critical security vulnerability, CVE-2024-12907, has been found in Kentico CMS version 7. This issue lets attackers perform a reflected Cross-Site Scripting (XSS) attack by

Jan 2, 2025 WordPress API Exploit PHP Google

CVE-2023-47807 - Missing Authorization in 10Web 10WebAnalytics Exposes Sites to Unauthorized Access

In late 2023, a security vulnerability known as CVE-2023-47807 was discovered in the popular WordPress plugin, 10WebAnalytics. This bug, caused by missing authorization checks, affects

Jan 2, 2025 WordPress Exploit

CVE-2023-48739 - Exploiting Missing Authorization in Porto Theme – What You Need to Know

In late 2023, a significant security vulnerability was discovered in the popular Porto Theme for WordPress and Magento: CVE-2023-48739. This bug impacts websites using Porto

CVE-2023-47661 - Exploiting Missing Authorization in Dragfy Addons for Elementor (<= 1..2)

Jan 2, 2025 WordPress API Exploit

CVE-2023-47661 - Exploiting Missing Authorization in Dragfy Addons for Elementor (<= 1..2)

In the world of WordPress site building, plugins are everywhere. Dragfy Addons for Elementor is a popular extension that promises extra widgets and easy site

Jan 2, 2025 WordPress Exploit PHP

CVE-2023-47693 - How a Missing Authorization Bug in Ultimate Addons for Contact Form 7 Exposed Your WordPress Site

Summary: A security flaw, CVE-2023-47693, was discovered in the widely used WordPress plugin *Ultimate Addons for Contact Form 7* (versions up to 3.2.6)