WordPress - CVE CyberSecurity Database News (Page 42)

Nov 19, 2024 WordPress Exploit PHP

CVE-2024-11038 - Critical Arbitrary Shortcode Execution in 'WPB Popup for Contact Form 7' Plugin (CF7 Popup) – Exploit Details and Fixes

--- Introduction WordPress remains the world's favorite CMS, powering millions of websites. Its strength is its massive plugin ecosystem – but that’s exactly

Nov 16, 2024 RCE WordPress Exploit PHP

CVE-2024-8856 - Critical Arbitrary File Upload in WP Time Capsule's Backup and Staging Plugin for WordPress

Discovered: Early 2024 Affected Plugin: WP Time Capsule – Backup and Staging Plugin Slug: wp-time-capsule Vulnerable Versions: 1.22.21 and below Severity: Critical (Unauthenticated Remote

Nov 15, 2024 XSS WordPress Exploit

CVE-2024-10793 - How a WordPress Plugin Flaw Exposed Admins to Dangerous Stored XSS Attacks

WordPress is the world's most popular content management system, powering over 40% of all websites. Plugins make WordPress hugely flexible, but they introduce

CVE-2024-10924 - Auth Bypass in Really Simple Security Plugins Lets Hackers Impersonate Any WordPress User

Nov 15, 2024 WordPress API Exploit PHP

CVE-2024-10924 - Auth Bypass in Really Simple Security Plugins Lets Hackers Impersonate Any WordPress User

CVE-2024-10924 is a newly discovered vulnerability in the popular Really Simple Security plugins (Free, Pro, and Pro Multisite) for WordPress. This serious flaw affects versions

Nov 14, 2024 WordPress PHP

CVE-2024-10571 - Local File Inclusion (LFI) Flaw in Chartify – WordPress Chart Plugin

CVE-2024-10571 identifies a serious Local File Inclusion (LFI) vulnerability in the Chartify – WordPress Chart Plugin, affecting all versions up to and including 2.9.5.