WordPress - CVE CyberSecurity Database News (Page 71)

Apr 24, 2024 XSS WordPress Exploit PHP Crocoblock JetFormBuilder

CVE-2023-48763 - How a Simple XSS Vulnerability in JetFormBuilder Left WordPress Sites Wide Open

Summary: CVE-2023-48763 is a Cross-Site Scripting (XSS) vulnerability found in Crocoblock’s JetFormBuilder plugin, affecting all versions up to 3.1.4

Apr 24, 2024 XSS WordPress xtemos WoodMart

CVE-2023-25790 - XSS Attack in xtemos WoodMart (Up to 7..4) – Exploit Details and Simple Walkthrough

If you’re running an e-commerce site on WordPress and using the popular xtemos WoodMart theme, you need to be aware of a serious

Apr 24, 2024 WordPress Exploit PHP Elementor Elementor Website Builder

CVE-2023-47504 - Exploiting Improper Authentication in Elementor Website Builder (<=3.16.4): How Attackers Gained Unauthorized Access

Elementor is one of the most popular WordPress website builders, powering millions of websites around the world. However, in November 2023, a serious vulnerability was

Apr 23, 2024 WordPress Exploit SQL

CVE-2024-31077 - Deep Dive Into Forminator Plugin SQL Injection Vulnerability

Forminator is a popular WordPress plugin designed to help users quickly build forms, polls, and quizzes. But in early 2024, security researchers discovered a major

Apr 23, 2024 WordPress Exploit PHP

CVE-2024-28890 - How Forminator's File Upload Vulnerability Puts Your WordPress Site at Risk

--- Executive Summary CVE-2024-28890 affects the popular WordPress plugin Forminator prior to version 1.29.. The core problem? Anyone could upload dangerous files—think