WordPress - CVE CyberSecurity Database News (Page 49)

Sep 12, 2024 WordPress API SQL

CVE-2024-8529 - How a Dangerous SQL Injection Flaw in LearnPress Puts WordPress Sites at Risk

If you use LearnPress on your WordPress site, you must read this! In February 2024, a serious vulnerability—tracked as CVE-2024-8529—was discovered in the

Sep 10, 2024 WordPress PHP

CVE-2024-44871 - Exploiting Arbitrary File Upload in moziloCMS v3.’s /admin/index.php

CVE-2024-44871 is a fresh and severe vulnerability found in the open-source moziloCMS v3.. It lets attackers upload any file to the server—including malicious scripts—

Aug 21, 2024 RCE WordPress PHP

CVE-2024-6386 - Critical RCE Vulnerability in WPML Plugin—How Authenticated Attackers Can Take Over WordPress Sites

The WordPress Multilingual Plugin (WPML) is one of the most popular translation plugins in the WordPress ecosystem, boasting over a million active installations. However, a

Aug 21, 2024 WordPress Exploit

CVE-2024-28000 - Privilege Escalation in LiteSpeed Cache Plugin Explained

Summary: A major vulnerability, CVE-2024-28000, was found in the popular WordPress plugin LiteSpeed Cache. This security flaw allows users to gain higher privileges than intended,

Aug 21, 2024 WordPress iOS SQL PHP

CVE-2024-7651 - How Attackers Can Steal Data From WordPress Sites Using The App Builder Plugin (Full Exploit Analysis)

In June 2024, a new WordPress vulnerability called CVE-2024-7651 was disclosed affecting The App Builder – Create Native Android & iOS Apps On The Flight plugin.