WordPress - CVE CyberSecurity Database News (Page 12)

Feb 8, 2025 WordPress Exploit

CVE-2025-0316 - Authentication Bypass in WordPress Directorybox Manager Plugin ≤ 2.5 - Full Analysis and Exploit

CVE-2025-0316 is a critical vulnerability affecting the popular Directorybox Manager plugin for WordPress. Versions up to and including 2.5 are impacted. The flaw lets

Feb 7, 2025 CSRF WordPress API

CVE-2025-25103 - Cross-Site Request Forgery (CSRF) in bnielsen Indeed API (up to .5)

Cross Site Request Forgery (CSRF) continues to make the headlines, and now it’s bnielsen’s Indeed API plugin’s turn. If you’re running

Feb 7, 2025 WordPress Exploit OAuth Google

CVE-2025-1061 - Authentication Bypass Vulnerability in Nextend Social Login Pro Lets Attackers Impersonate Any WordPress User

In early 2025, a critical vulnerability was discovered in the popular Nextend Social Login Pro plugin for WordPress. Tracked as CVE-2025-1061, this flaw impacts plugin

Feb 6, 2025 CSRF XSS WordPress Exploit

CVE-2025-0522 - How a Dangerous CSRF and XSS Combo Threatens LikeBot Plugin for WordPress

Published: June 2024 *By: SecureWP Insights Team* The world of WordPress security is never dull, and now, a new vulnerability has surfaced that could endanger

Feb 5, 2025 RCE WordPress Exploit PHP

CVE-2025-1028 - Remote Code Execution via Arbitrary File Upload in Contact Manager for WordPress (up to 8.6.4)

On June 13, 2024, a serious vulnerability—CVE-2025-1028—was disclosed in the popular “Contact Manager” WordPress plugin, affecting all versions up to, and including, 8.