WordPress - CVE CyberSecurity Database News (Page 53)

Jun 19, 2024 WordPress Exploit

CVE-2023-47681 - How a Missing Authorization Bug in WooCommerce Checkout Manager (<= 7.3.) Puts Your Store at Risk

--- If you’re running a WordPress site with WooCommerce, chances are you use plugins to smooth out your customer’s shopping experience. One popular

Jun 19, 2024 WordPress muffin group Betheme

CVE-2023-47770 - Breaking Down the Missing Authorization Flaw in Muffin Group Betheme (up to 27.1.1)

--- If you build websites with WordPress, you’ve likely come across Betheme from the Muffin Group — it’s one of the most popular premium

Jun 19, 2024 WordPress Exploit Brainstorm Force astra bulk edit

CVE-2023-44148 - Missing Authorization in Astra Bulk Edit (v1.2.7 and Below) – How Attackers Can Hijack Your WordPress Site

In late 2023, a concerning vulnerability—CVE-2023-44148—was disclosed in Astra Bulk Edit, a popular plugin made by Brainstorm Force. If you use Astra Bulk

Jun 19, 2024 WordPress posimyth nexter

CVE-2023-45658 - Missing Authorization in POSIMYTH Nexter (n/a - 2..3) — Exploit Details & Mitigation

Summary: POSIMYTH Nexter, a popular WordPress theme, was found to have a missing authorization vulnerability (CVE-2023-45658) up to version 2..3. This flaw lets malicious

Jun 19, 2024 WordPress Exploit PHP ThemePunch OHG essential grid

CVE-2023-47771 - Exploiting the Missing Authorization Flaw in Essential Grid WordPress Plugin (n/a – 3..18)

--- WordPress is famous for its flexibility and tons of plugins. But with great customization comes the risk of vulnerabilities—sometimes very dangerous ones. One