WordPress - CVE CyberSecurity Database News (Page 10)

Feb 18, 2025 XSS WordPress PHP

CVE-2025-0864 - Reflected XSS Vulnerability in Active Products Tables for WooCommerce Plugin (All Versions ≤ 1..6.6) Explained

If you’re running a WordPress online store with WooCommerce, you might be using Active Products Tables for WooCommerce to display product listings. However, a

Feb 18, 2025 XSS WordPress Exploit Google

CVE-2024-13565 - Exploiting Stored XSS in Simple Map No Api WordPress Plugin (<= v1.9)

TL;DR: The Simple Map No Api plugin for WordPress, up to and including version 1.9, has a dangerous vulnerability. If you’re letting

Feb 17, 2025 XSS WordPress PHP Google

CVE-2025-23840 - Reflected XSS in WP-NOTCAPTCHA Plugin Explained With Code & Exploit Details

WordPress is the most popular website platform around, which means its plugins are a juicy target for hackers. A recently disclosed vulnerability—CVE-2025-23840—affects the

Feb 16, 2025 WordPress Exploit PHP

CVE-2025-26779 - How a Path Traversal Bug in Keep Backup Daily Can Put Your Files at Risk

In early 2025, security researchers uncovered a serious vulnerability—CVE-2025-26779—in a popular backup plugin called Keep Backup Daily made by Fahad Mahmood. This flaw,

Feb 15, 2025 XSS WordPress

CVE-2025-1005 - How ElementsKit Elementor Addons Plugin for WordPress Can Be Exploited with Stored XSS in the Image Accordion Widget

A new security vulnerability, tracked as CVE-2025-1005, has been discovered in the popular WordPress plugin ElementsKit Elementor Addons. This vulnerability affects all plugin versions up