WordPress - CVE CyberSecurity Database News (Page 40)

Dec 6, 2024 WordPress SQL PHP

CVE-2024-11728 - Critical SQL Injection in KiviCare WordPress Plugin Exposes Patient Data

The web is an increasingly popular place for healthcare management, but security oversights can put sensitive information at risk. Recently, security researchers and the Wordfence

Dec 6, 2024 XSS WordPress PHP

CVE-2024-10879 - How ForumWP for WordPress Exposed Sites to Reflected XSS (& Exploit Guide)

WordPress powers millions of websites, and plugins are a big reason for that popularity. However, plugins can sometimes introduce security risks, and CVE-2024-10879 is a

CVE-2024-5020: Multiple WordPress Plugins Vulnerable to Stored Cross-Site Scripting (XSS) via FancyBox JavaScript Library

Dec 4, 2024 XSS WordPress Exploit

CVE-2024-5020: Multiple WordPress Plugins Vulnerable to Stored Cross-Site Scripting (XSS) via FancyBox JavaScript Library

Security researchers have discovered a critical vulnerability, CVE-2024-5020, in multiple plugins for WordPress, including versions 1.3.4 to 3.5.7 of the FancyBox

Nov 30, 2024 CSS WordPress API PHP

CVE-2024-53738 - Exploiting SSRF in Asset CleanUp: Page Speed Booster Plugin

Published: June 2024 Vulnerability Type: Server-Side Request Forgery (SSRF) Affected Software: Asset CleanUp: Page Speed Booster WordPress Plugin Vulnerable Versions: All versions up to and

Nov 28, 2024 RCE WordPress Exploit PHP

CVE-2024-8672 - Remote Code Execution in Widget Options WordPress Plugin — Full Exploit Analysis & Remediation Notes

--- Overview *CVE-2024-8672* is a critical security vulnerability affecting The Widget Options – The #1 WordPress Widget & Block Control Plugin (hereafter "Widget Options"