WordPress - CVE CyberSecurity Database News (Page 2)

Apr 12, 2025 WordPress PHP

CVE-2025-3418 - How a Simple Bug in WPC Admin Columns Plugin Let Subscribers Become Administrators

A serious vulnerability—now tracked as CVE-2025-3418—was discovered in the popular WPC Admin Columns WordPress plugin (versions 2..6 to 2.1.). This bug,

Apr 11, 2025 WordPress Exploit PHP

CVE-2025-3439 - PHP Object Injection Vulnerability in Everest Forms for WordPress (Up to v3.1.1) — Details, Exploit, and What You Need to Know

WordPress website owners: a serious security flaw has been discovered in the popular Everest Forms plugin, officially tracked as CVE-2025-3439. This vulnerability affects all versions

Apr 10, 2025 WordPress API Exploit

CVE-2025-3102 - SureTriggers WordPress Plugin Authentication Bypass – How Attackers Can Forge Admin Accounts

The security of your WordPress website is only as strong as the plugins you use. Recently, a critical vulnerability known as CVE-2025-3102 has been discovered

Apr 6, 2025 WordPress Exploit SQL PHP

CVE-2025-1264 - SQL Injection in Broken Link Checker by AIOSEO – Detailed Exploit Overview

The WordPress plugin "Broken Link Checker by AIOSEO – Easily Fix/Monitor Internal and External links" is hugely popular for helping site owners maintain

Apr 2, 2025 RCE WordPress PHP

CVE-2025-2005 - How a Critical Flaw in Front End Users Plugin Lets Hackers Take Over Your WordPress Site

--- The world of WordPress plugins is vast, but when vulnerabilities crop up, hackers don’t waste any time. One of the latest and most