WordPress - CVE CyberSecurity Database News (Page 13)

Jan 25, 2025 XSS WordPress

CVE-2024-10552 - Flexmls IDX Plugin for WordPress – Stored XSS Attack Exploit Guide and Analysis

The Flexmls® IDX Plugin for WordPress is a popular tool used by real estate agents to display MLS property listings on their websites. However, this

Jan 21, 2025 WordPress Exploit SQL PHP

CVE-2025-22710 - Blind SQL Injection in StoreApps Smart Manager (Up to v8.52.) – Deep Dive and Exploit Example

Published: June 2024 CVE: CVE-2025-22710 Affected Product: StoreApps Smart Manager (for WooCommerce) Vulnerable Versions: All versions up to and including 8.52. Vulnerability Type: Blind

Jan 18, 2025 WordPress SQL PHP

CVE-2025-0308 - How a Simple Search Led to a Serious SQL Injection in Ultimate Member for WordPress

In early 2025, security researchers uncovered a critical vulnerability in one of WordPress’s most popular membership plugins: Ultimate Member – User Profile, Registration, Login, Member

Jan 14, 2025 WordPress API Google

CVE-2024-12365 - How a WordPress Caching Plugin Exposed Sensitive Data and Internal Networks

--- Overview In early 2024, a security vulnerability was disclosed for the popular W3 Total Cache plugin (often abbreviated as W3TC) for WordPress: CVE-2024-12365. This

Jan 8, 2025 RCE WordPress Exploit PHP

CVE-2024-11635 - Remote Code Execution in WordPress File Upload Plugin via wfu_ABSPATH Cookie

CVE-2024-11635 is a serious security vulnerability in the popular WordPress File Upload plugin, affecting all versions up to and including 4.24.12. Attackers can