WordPress - CVE CyberSecurity Database News (Page 6)

Mar 20, 2025 WordPress Exploit PHP

CVE-2025-2505 - Age Gate WordPress Plugin – Local PHP File Inclusion Vulnerability Exploit Guide

Published: July 2024 *By: WP Security Labs Exclusive* Summary A critical vulnerability (CVE-2025-2505) has been discovered in the Age Gate WordPress plugin – one of the

Mar 14, 2025 WordPress API Exploit PHP

CVE-2025-1285 - How Unauthorized Attackers Can Hijack Resido Real Estate WordPress Sites

In early 2025, a high-risk security flaw was uncovered in the popular Resido - Real Estate WordPress Theme. This vulnerability, tracked as CVE-2025-1285, allows anyone—

Mar 11, 2025 WordPress PHP

CVE-2025-1661 - Dangerous Local File Inclusion in HUSKY – Products Filter Professional for WooCommerce (WordPress) Explained

If you’re running a WooCommerce shop on WordPress and use the popular HUSKY – Products Filter Professional plugin, you must read this. There's

Mar 7, 2025 WordPress API

CVE-2024-13857 - Server-Side Request Forgery in WPGet API – Connect to any external REST API WordPress Plugin

A severe vulnerability has been discovered in the WPGet API – Connect to any external REST API plugin for WordPress. Tracked as CVE-2024-13857, this flaw exposes

Mar 4, 2025 RCE WordPress PHP

CVE-2025-0912 - Critical PHP Object Injection and RCE in Donations Widget WordPress Plugin (Up to 3.19.4)

WordPress is all about making things easier, from blogging to taking donations. But sometimes, plugins built to help can be a big risk. One such