WordPress - CVE CyberSecurity Database News (Page 102)

Nov 22, 2023 XSS WordPress Exploit 10web WDContactFormBuilder

CVE-2023-5048 - Stored Cross-Site Scripting in WDContactFormBuilder WordPress Plugin Explained

CVE-2023-5048 is a security vulnerability that affects the WDContactFormBuilder plugin for WordPress, up to and including version 1..72. This vulnerability is a Stored Cross-Site

Nov 22, 2023 XSS WordPress Exploit weatheratlas

CVE-2023-5163 - Stored XSS in Weather Atlas Widget WordPress Plugin (<= 1.2.1) – Simple Exploit Guide

Intro In January 2024, a serious security flaw was found in the popular WordPress plugin, Weather Atlas Widget. Registered as CVE-2023-5163, this bug exposes websites

Nov 22, 2023 WordPress bompus WP Customer Reviews

CVE-2023-4686 - Sensitive Information Exposure in WP Customer Reviews (WordPress) — How Attackers Can Leak Your Hidden Content

Summary: CVE-2023-4686 is a documented vulnerability affecting the popular WordPress plugin *WP Customer Reviews* (versions up to and including 3.6.6). This flaw lets

Nov 22, 2023 XSS WordPress Exploit davidvongries Ultimate Dashboard – Custom WordPress Dashboard

CVE-2023-4726 - Exploiting XSS in WordPress Ultimate Dashboard Plugin – A Deep Dive

If you’re running a WordPress site, plugins add amazing features to tailor your website exactly as you want. However, sometimes these plugins introduce dangerous

Nov 22, 2023 WordPress Exploit Userproplugin Userpro

CVE-2023-2448 - How a Missing Capability Check in UserPro Led to Sensitive Data Exposure in WordPress

In this post, we’ll take a deep dive into CVE-2023-2448—a security flaw in the popular UserPro plugin for WordPress. This vulnerability let unauthenticated