PHP - CVE CyberSecurity Database News (Page 227)

Oct 31, 2022 XSS WordPress Exploit PHP Rock Convert

CVE-2022-3440: Reflected Cross-Site Scripting (XSS) Vulnerability in Rock Convert WordPress Plugin Before 2.11.

A recent security advisory has disclosed a Reflected Cross-Site Scripting (XSS) vulnerability in the Rock Convert WordPress plugin prior to version 2.11.. The

Oct 31, 2022 RCE WordPress API Exploit PHP LearnPress – WordPress LMS Plugin

CVE-2022-3360: Remote Code Execution Vulnerability in LearnPress WordPress Plugin, Exploit Details & Mitigation

WordPress is one of the most popular content management systems (CMS) powering millions of websites globally. Plugins like LearnPress are used by thousands of website

Oct 31, 2022 CSS XSS WordPress PHP WP Word Count

CVE-2022-3408 - How WP Word Count Plugin’s Settings Risk XSS, Even for Admins

WordPress plugins are famous for boosting site functionality but, unfortunately, sometimes also for their security holes. Today, let's deep-dive into a real-

Oct 31, 2022 WordPress Exploit PHP Easy WP SMTP

CVE-2022-3334 - Inside the Easy WP SMTP PHP Object Injection Vulnerability (Exploit, Code, and Mitigation)

--- Introduction In the world of WordPress plugins, security vulnerabilities can go undetected for years and put thousands of websites at risk. One recent example is

Oct 31, 2022 XSS WordPress Exploit PHP Newspaper

CVE-2022-2167 - Reflected XSS Vulnerability in Newspaper WordPress Theme (< v12) – Deep Dive & Exploit Example

If you are running a WordPress site with the popular Newspaper theme and haven’t updated to version 12, you may be at risk! This