WordPress - CVE CyberSecurity Database News (Page 103)

Nov 22, 2023 WordPress Exploit Userproplugin Userpro

CVE-2023-2448 - How a Missing Capability Check in UserPro Led to Sensitive Data Exposure in WordPress

In this post, we’ll take a deep dive into CVE-2023-2448—a security flaw in the popular UserPro plugin for WordPress. This vulnerability

Nov 22, 2023 WordPress Exploit funnelforms Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor – Funnelforms Free

CVE-2023-5416 - How a Simple Missing Capability Check in Funnelforms Free Lets Any User Delete Your Categories

In the world of WordPress plugins, security mistakes can have massive consequences. In late 2023, a critical flaw was discovered in the popular Funnelforms Free

Nov 22, 2023 CSRF XSS WordPress jonashjalmarsson HTML filter and csv-file search

CVE-2023-5096 - Stored XSS in WordPress “HTML filter and csv-file search” Plugin – How it Works and Exploit Example

If you’re running the popular HTML filter and csv-file search WordPress plugin (csvfilter-search), version 2.7 or lower, your site is vulnerable

Nov 22, 2023 XSS WordPress PHP themepoints Tab Ultimate

CVE-2023-5667 - Exploiting Stored Cross-Site Scripting in Tab Ultimate WordPress Plugin — A Deep Dive

WordPress plugin vulnerabilities can put your entire website at risk, and nothing exemplifies this more than CVE-2023-5667. In this article, we’ll look

Nov 22, 2023 CSRF WordPress Exploit PHP Userproplugin Userpro

CVE-2023-2440 - Critical Vulnerability in UserPro Plugin for WordPress: Cross-Site Request Forgery Leading to Privilege Escalation

The popular UserPro plugin for WordPress is facing a critical vulnerability due to Cross-Site Request Forgery (CSRF) in versions up to, and including, 5.