WordPress - CVE CyberSecurity Database News (Page 41)

Nov 28, 2024 WordPress PHP

CVE-2024-10798 - Exploiting Information Exposure in Royal Elementor Addons and Templates for WordPress

WordPress is one of the most widely used content management systems in the world, powering millions of sites. As a result, its ecosystem of themes

Nov 28, 2024 RCE WordPress PHP

CVE-2024-11082 - How a WordPress Plugin Put Sites at Risk of Arbitrary File Upload & Remote Code Execution

If you run a WordPress website and you use the Tumult Hype Animations plugin, this post is crucial for you. A critical vulnerability—CVE-2024-11082—has

Nov 26, 2024 RCE WordPress API

CVE-2024-10781 - WordPress CleanTalk Plugin Flaw Allows Unauthenticated Arbitrary Plugin Installation

Summary: A critical security hole (CVE-2024-10781) was discovered in the popular Spam protection, Anti-Spam, FireWall by CleanTalk plugin for WordPress. This bug, which affects all

Nov 26, 2024 WordPress

CVE-2024-10542 - How A CleanTalk Plugin Bug Lets Attackers Install ANY Plugin on Your WordPress Site

Intro: Recently, a serious vulnerability was found in the popular “Spam protection, Anti-Spam, FireWall by CleanTalk” WordPress plugin. Known as CVE-2024-10542, this bug lets hackers

Nov 23, 2024 WordPress Exploit PHP

CVE-2024-10873 - Critical Local File Inclusion (LFI) Vulnerability in LA-Studio Element Kit for Elementor

A serious security vulnerability, CVE-2024-10873, has been found in the popular LA-Studio Element Kit for Elementor WordPress plugin. All versions up to and including 1.