WordPress - CVE CyberSecurity Database News (Page 76)

Feb 29, 2024 XSS WordPress PHP José Fernandez Adsmonetizer

CVE-2024-1437 - Reflected XSS Vulnerability in Adsmonetizer WordPress Plugin – What You Need to Know

June 2024—A fresh vulnerability has shaken the WordPress world. CVE-2024-1437 is an Improper Neutralization of Input During Web Page Generation, better known as a

Feb 29, 2024 WordPress Exploit PHP Perfmatters

CVE-2023-47874 - Missing Authorization in Perfmatters WordPress Plugin (<= 2.1.6) — How Attackers Can Exploit It

On October 30, 2023, a serious vulnerability was disclosed in the popular Perfmatters WordPress plugin—an optimization tool used on over 100,000 WordPress sites.

Feb 29, 2024 CSRF WordPress API PHP Thrive Themes Thrive Automator

CVE-2023-51531 - Cross-Site Request Forgery (CSRF) Vulnerability in Thrive Themes Thrive Automator (v1.17 and Below) – Exploit Details & Patch Guidance

--- CVE-2023-51531 is a security vulnerability involving Cross-Site Request Forgery (CSRF) in the popular Thrive Automator WordPress plugin, from its initial versions up to and

Feb 29, 2024 CSRF WordPress Exploit GS Plugins

CVE-2023-51530 - Exploiting CSRF in GS Plugins Logo Slider – Showcase Your Logos, Expose Your Site

Summary: *CVE-2023-51530* is a Cross-Site Request Forgery (CSRF) vulnerability found in the WordPress plugin Logo Slider – Logo Showcase, Logo Carousel, Logo Gallery and Client Logo

Feb 29, 2024 CSRF WordPress Exploit Nuggethon Custom Order Statuses for WooCommerce

CVE-2024-25930 - Exploiting CSRF in Nuggethon Custom Order Statuses for WooCommerce (<= 1.5.2)

On February 21, 2024, a serious security vulnerability was disclosed in the Nuggethon Custom Order Statuses for WooCommerce plugin, affecting all versions up to 1.