WordPress - CVE CyberSecurity Database News (Page 10)

Feb 14, 2025 WordPress SQL PHP

CVE-2025-0821 - Time-based SQL Injection in Bit Assist WordPress Plugin (<= 1.5.2) – Details, Exploit, and Mitigation

A critical vulnerability has been identified in the Bit Assist plugin for WordPress—one of the popular plugins for managing help widgets and customer support

Feb 13, 2025 XSS WordPress API PHP

CVE-2024-13227 - Stored XSS Vulnerability in Rank Math SEO Plugin for WordPress – What You Need To Know

Published: June 2024 Introduction A new critical vulnerability, CVE-2024-13227, has been discovered in the popular Rank Math SEO – AI SEO Tools to Dominate SEO Rankings

Feb 12, 2025 XSS WordPress API Exploit

CVE-2024-10322 - How Brizy – Page Builder Plugin for WordPress Was Vulnerable to Authenticated SVG XSS

--- If you use WordPress to build sites, you may have heard of Brizy – Page Builder, a popular plugin used on more than 90,000

Feb 11, 2025 WordPress Exploit

CVE-2022-3180: WPGateway Plugin for WordPress Privilege Escalation Vulnerability - Creating Malicious Administrator Accounts

A critical vulnerability has been discovered in the WPGateway Plugin for WordPress, affecting versions up to and including 3.5. This vulnerability, assigned the Common

Feb 9, 2025 XSS WordPress SQL

CVE-2024-13440 - Critical SQL Injection in Super Store Finder WordPress Plugin (Up to v7.) — How It Works, Exploit Details & Code Example

CVE-2024-13440 is a newly identified vulnerability found in the popular Super Store Finder plugin for WordPress. If you’re running any version up to 7.