WordPress - CVE CyberSecurity Database News (Page 18)

Jan 2, 2025 WordPress API Exploit PHP

CVE-2023-47183 - How a Missing Authorization Vulnerability in GiveWP Exposes Your Donations

GiveWP is one of the most popular WordPress plugins for managing donations, used by nonprofits, charities, and individual fundraisers worldwide. If your website relies on

Jan 2, 2025 WordPress Exploit

CVE-2023-46639 - How a Missing Authorization Bug in kk Star Ratings Lets Attackers Manipulate WordPress Ratings

If you use WordPress, there's a strong chance you want your visitors to leave feedback—maybe star ratings for your blog posts or

Jan 2, 2025 XSS WordPress Exploit PHP

CVE-2023-46644 - Exploiting Missing Authorization in WP CTA PRO WordPress Plugin (<= 1.5.8)

WordPress is the backbone of over 40% of the web, powering millions of blogs, shops, and business pages. But with its popularity comes a gold

Jan 2, 2025 WordPress

CVE-2023-46637 - Exploiting Missing Authorization in “Generate Dummy Posts” WordPress Plugin (<= 1..)

--- WordPress is a powerhouse for content creators, but its open ecosystem sometimes introduces security risks. Today, let's dig deep into CVE-2023-46637, a

Jan 2, 2025 WordPress API Exploit

CVE-2023-47179 - How Missing Authorization in WooODT Lite Puts Your WooCommerce Store at Risk (With Example Exploit)

--- What is CVE-2023-47179? CVE-2023-47179 is a security vulnerability found in the popular ByConsole WooODT Lite WordPress plugin, affecting versions up to and including 2.