WordPress - CVE CyberSecurity Database News (Page 56)

Jun 9, 2024 WordPress

CVE-2023-34003 - Missing Authorization in WooCommerce Box Office – What You Need to Know

WooCommerce is one of the most popular plugins for WordPress, powering millions of online shops. One of its extensions, WooCommerce Box Office, helps merchants sell

Jun 4, 2024 WordPress Exploit PHP

CVE-2024-25600 - Code Injection in Bricks Builder – What You Need to Know (Exclusive Deep Dive)

In February 2024, security researchers discovered a critical vulnerability in Bricks Builder, a popular WordPress page builder plugin. This bug, tracked as CVE-2024-25600, is a

Jun 4, 2024 WordPress Apache PHP

CVE-2023-48753 - Authentication Bypass in 10up Restricted Site Access Plugin – Exploit Explained

Summary: CVE-2023-48753 is a critical vulnerability in the “Restricted Site Access” WordPress plugin by 10up. This flaw, termed as “Authentication Bypass by Spoofing,” lets attackers

Jun 4, 2024 WordPress Exploit PHP

CVE-2023-48747 - Exploiting Improper Authentication in Booster for WooCommerce (Versions up to 7.1.2)

In late 2023, a critical vulnerability was discovered in the popular WordPress plugin Booster for WooCommerce, tracked as CVE-2023-48747. This vulnerability revolves around improper authentication,

Jun 4, 2024 WordPress Exploit Chrome

CVE-2023-49741 - Authentication Bypass in wpdevart Coming Soon and Maintenance Mode Plugin – How Dangerous Is It?

--- Summary: CVE-2023-49741 is a security vulnerability that impacts the wpdevart Coming Soon and Maintenance Mode WordPress plugin (versions up to and including 3.7.