WordPress - CVE CyberSecurity Database News (Page 66)

May 17, 2024 XSS WordPress Exploit PHP

CVE-2023-45652 - Path Traversal in Remote Content Shortcode Plugin Allows Arbitrary File Inclusion

WordPress plugins make it easy to add complex functions to your website, but security issues in those plugins can put your site and your data

May 17, 2024 CSRF WordPress Exploit Google

CVE-2023-44478 - How a CSRF Vulnerability in WP Hive Events Rich Snippets for Google Allows Attackers to Exploit Trusted Credentials

_Discovered in 2023, CVE-2023-44478 shocked website owners who used the WP Hive “Events Rich Snippets for Google” WordPress plugin. This cross-site request

May 17, 2024 RCE WordPress Exploit PHP

CVE-2023-39163 - Path Traversal Vulnerability in Averta Phlox Shop – How PHP Local File Inclusion is Possible

Security vulnerabilities in WordPress plugins keep emerging, and some can be very dangerous if not patched. One such critical bug is known as CVE-2023-

May 17, 2024 WordPress Exploit PHP averta phlox portfolio

CVE-2023-38399 - Path Traversal in Averta Phlox Portfolio Before 2.3.1 — How PHP Local File Inclusion Works

A deep dive into a critical path traversal flaw that exposes your website to Local File Inclusion (LFI) risks. What is CVE-2023-38399? CVE-

May 17, 2024 WordPress PHP By Averta Shortcodes and extra features for Phlox theme

CVE-2023-37888 - Path Traversal Vulnerability in Phlox “Shortcodes and Extra Features” Plugin Lets Attackers Include Local Files

Short Summary: CVE-2023-37888 exposes WordPress sites using the popular Phlox theme’s plugin, Shortcodes and Extra Features, to a dangerous Path Traversal flaw.