WordPress - CVE CyberSecurity Database News (Page 126)

Aug 31, 2023 XSS WordPress Exploit PHP rustaurius Order Tracking – WordPress Status Tracking Plugin

CVE-2023-4471 - Reflected XSS Vulnerability in Order Tracking Pro Plugin for WordPress—What You Need to Know

If you’re running a WordPress-powered store and using the Order Tracking Pro plugin (versions up to and including 3.3.6), you may be

Aug 30, 2023 XSS WordPress Exploit Miled

CVE-2023-34172 - Stored XSS Vulnerability in Miled WordPress Social Login Plugin (<= 3..4) — Explained Simply

The world of WordPress plugins is massive, with thousands of useful tools that make running a website easier. But sometimes, even popular plugins can have

Aug 30, 2023 CSRF WordPress API POEditor

CVE-2023-4209 - How Missing CSRF Protection in POEditor Plugin for WordPress Exposes Your Website

The security of WordPress plugins is crucial to every website owner. This long read breaks down CVE-2023-4209 in the POEditor WordPress plugin, affects versions before

CVE-2023-4596 - How Forminator’s File Upload Flaw Exposed WordPress Sites to Arbitrary File Uploads and Remote Code Execution

Aug 30, 2023 RCE WordPress Exploit PHP wpmudev

CVE-2023-4596 - How Forminator’s File Upload Flaw Exposed WordPress Sites to Arbitrary File Uploads and Remote Code Execution

Forminator is a popular WordPress plugin, with over 400,000 active installations. It’s commonly used for building forms of all kinds, from contact forms

CVE-2023-4404 - Privilege Escalation in Charitable Donation Forms Plugin for WordPress (Up To v1.7..12) — Analysis and Exploit Guide

Aug 23, 2023 WordPress Exploit smub Donation Forms by Charitable – Donations Plugin & Fundraising Platform for WordPress

CVE-2023-4404 - Privilege Escalation in Charitable Donation Forms Plugin for WordPress (Up To v1.7..12) — Analysis and Exploit Guide

In September 2023, a severe vulnerability—CVE-2023-4404—was discovered in the Charitable - Donation Forms WordPress plugin, affecting all versions up to and including 1.