PHP - CVE CyberSecurity Database News (Page 28)

Jan 8, 2025 RCE WordPress Exploit PHP

CVE-2024-11635 - Remote Code Execution in WordPress File Upload Plugin via wfu_ABSPATH Cookie

CVE-2024-11635 is a serious security vulnerability in the popular WordPress File Upload plugin, affecting all versions up to and including 4.24.12. Attackers can

Jan 7, 2025 XSS WordPress Exploit PHP

CVE-2025-22294 - Reflected XSS in Gravity Master Custom Field For WP Job Manager – Full Analysis and Exploit Guide

Date: June 2024 Vulnerability Type: Cross-site Scripting (Reflected XSS) Affected Plugin: Custom Field For WP Job Manager (by Gravity Master) Versions: All before and including

Jan 4, 2025 Exploit SQL PHP

CVE-2025-0212 - Critical SQL Injection Vulnerability in Campcodes Student Grading System 1. (view_students.php) — Details & Exploit

A major security flaw, classified as CVE-2025-0212, has been identified and confirmed in the Campcodes Student Grading System version 1.. The vulnerability impacts an essential

Jan 4, 2025 WordPress PHP

CVE-2024-10957 - PHP Object Injection Vulnerability in UpdraftPlus WordPress Plugin Explained

The safety of your WordPress site hinges on the security of the plugins you use. One popular plugin, UpdraftPlus: WP Backup & Migration Plugin, recently

Jan 4, 2025 RCE WordPress Exploit PHP

CVE-2024-12583 - Remote Code Execution and Arbitrary File Read in Dynamics 365 Integration Plugin for WordPress (Exploit and Analysis)

*Last updated: June 2024* *By WP Security Insights Team* Introduction CVE-2024-12583 is a critical vulnerability affecting the widely used Dynamics 365 Integration plugin for WordPress.