WordPress - CVE CyberSecurity Database News (Page 104)

Nov 22, 2023 WordPress Exploit Userproplugin Userpro

CVE-2023-2446 - Sensitive Information Disclosure in UserPro WordPress Plugin

WordPress is the world’s most popular website platform, powering millions of sites. To extend WordPress’s functionality, plugins are used for everything from contact

Nov 18, 2023 CSRF WordPress Patreon Patreon WordPress

CVE-2023-41129 - Exploiting CSRF in Patreon WordPress Plugin (<= 1.8.6)

In September 2023, security researchers uncovered a serious Cross-Site Request Forgery (CSRF) vulnerability in the popular Patreon WordPress plugin. Tracked as CVE-2023-41129,

Nov 18, 2023 CSRF WordPress Exploit Marco Milesi ANAC XML Bandi di Gara

CVE-2023-47655 - CSRF Vulnerability in Marco Milesi ANAC XML Bandi di Gara – In-Depth Guide, Exploit, and Remediation

CVE-2023-47655 is a Cross-Site Request Forgery (CSRF) vulnerability discovered in the popular plugin Marco Milesi ANAC XML Bandi di Gara, affecting versions

Nov 18, 2023 CSRF WordPress PHP Robert Macchi WP Links Page

CVE-2023-47651 - Cross-Site Request Forgery (CSRF) in WP Links Page – Exploit & Insights

--- Summary: A recent security flaw, tracked as CVE-2023-47651, was discovered in the popular WordPress plugin WP Links Page (developed by Robert Macchi). This

Nov 18, 2023 CSRF WordPress Peter Sterling Add Local Avatar

CVE-2023-47650 - Understanding and Exploiting CSRF in Peter Sterling’s Add Local Avatar WordPress Plugin

Cross-Site Request Forgery (CSRF) vulnerabilities continue to be a big problem for WordPress plugins, especially those that manage user accounts or profiles. In this