PHP - CVE CyberSecurity Database News (Page 4)

Apr 11, 2025 WordPress Exploit PHP

CVE-2025-3439 - PHP Object Injection Vulnerability in Everest Forms for WordPress (Up to v3.1.1) — Details, Exploit, and What You Need to Know

WordPress website owners: a serious security flaw has been discovered in the popular Everest Forms plugin, officially tracked as CVE-2025-3439. This vulnerability affects all versions

Apr 10, 2025 RCE Exploit PHP

CVE-2024-58136 - Yii2 Behavior Attach Bypass & Wild Exploitation (Exclusive Long Read)

Intro In the early months of 2025, security experts started noticing attacks leveraging a fresh vulnerability in Yii 2 web applications. Dubbed CVE-2024-58136, this bug

Apr 8, 2025 Windows Microsoft Exploit PHP

CVE-2025-29819 - Exploiting File Path Control in Azure Portal Windows Admin Center

A new security vulnerability, CVE-2025-29819, has been discovered in Microsoft’s Azure Portal, specifically within the Windows Admin Center integration. This vulnerability opens the door

Apr 6, 2025 WordPress Exploit SQL PHP

CVE-2025-1264 - SQL Injection in Broken Link Checker by AIOSEO – Detailed Exploit Overview

The WordPress plugin "Broken Link Checker by AIOSEO – Easily Fix/Monitor Internal and External links" is hugely popular for helping site owners maintain

Apr 4, 2025 RCE Exploit PHP

CVE-2024-11235 - Dangerous PHP Use-After-Free Vulnerability (RCE Risk with __set, ??=, and Exceptions)

Recently, security researchers discovered a critical vulnerability affecting recent versions of PHP. Tracked as CVE-2024-11235, this bug exists in PHP 8.3.* before 8.3.