WordPress - CVE CyberSecurity Database News (Page 117)

Oct 30, 2023 WordPress Exploit PHP bloafer PHP to Page

CVE-2023-5199 - How A Simple WordPress Plugin Flaw Can Give Attackers Full Control

In late 2023, a security flaw was reported in a small but widely used WordPress plugin named “PHP to Page.” This vulnerability, CVE-2023-5199,

Oct 27, 2023 XSS WordPress Exploit Stephen Darlington, Wandle Software Limited Smart App Banner

CVE-2023-46200 - Deep Dive into a Critical Stored XSS in Smart App Banner WordPress Plugin (<= 1.1.3)

CVE-2023-46200 refers to a serious vulnerability in the WordPress plugin Smart App Banner developed by Stephen Darlington, Wandle Software Limited. The flaw is

Oct 27, 2023 XSS WordPress Alkaweb Eonet Manual User Approve

CVE-2023-32738 - Exploiting Stored XSS in Eonet Manual User Approve Plugin (<= 2.1.3) – Deep Dive & Exploit Guide

--- If you use WordPress and the Eonet Manual User Approve plugin by Alkaweb, you need to pay attention to CVE-2023-32738. This vulnerability allows

Oct 27, 2023 XSS WordPress vektor-inc VK Filter Search

CVE-2023-5705 - How a Simple Exploit in VK Filter Search Plugin Can Open Your WordPress to Stored XSS

In the ever-growing list of WordPress plugin vulnerabilities, CVE-2023-5705 stands out. This security issue impacts the popular VK Filter Search plugin, used

Oct 27, 2023 CSRF WordPress nik00726 Thumbnail carousel slider

CVE-2023-5821 - How a Missing Nonce in Thumbnail Carousel Slider for WordPress Can Let Attackers Wipe Out Your Sliders

WordPress powers a huge chunk of the web, and plugins make it incredibly flexible. But with great power comes great responsibility—especially for plugin developers.