WordPress - CVE CyberSecurity Database News (Page 76)

Feb 29, 2024 CSRF XSS WordPress Exploit Ernest Marcinko Ajax Search Lite

CVE-2024-21752 - CSRF to Reflected XSS in Ajax Search Lite (<=4.11.4) — What You Need to Know

In early 2024, security researchers uncovered a dangerous vulnerability (CVE-2024-21752) affecting Ajax Search Lite, a popular WordPress plugin by Ernest Marcinko. If you&

Feb 29, 2024 XSS WordPress PHP José Fernandez Adsmonetizer

CVE-2024-1437 - Reflected XSS Vulnerability in Adsmonetizer WordPress Plugin – What You Need to Know

June 2024—A fresh vulnerability has shaken the WordPress world. CVE-2024-1437 is an Improper Neutralization of Input During Web Page Generation, better known

Feb 29, 2024 WordPress Exploit PHP Perfmatters

CVE-2023-47874 - Missing Authorization in Perfmatters WordPress Plugin (<= 2.1.6) — How Attackers Can Exploit It

On October 30, 2023, a serious vulnerability was disclosed in the popular Perfmatters WordPress plugin—an optimization tool used on over 100,000 WordPress sites.

Feb 29, 2024 CSRF WordPress API PHP Thrive Themes Thrive Automator

CVE-2023-51531 - Cross-Site Request Forgery (CSRF) Vulnerability in Thrive Themes Thrive Automator (v1.17 and Below) – Exploit Details & Patch Guidance

--- CVE-2023-51531 is a security vulnerability involving Cross-Site Request Forgery (CSRF) in the popular Thrive Automator WordPress plugin, from its initial versions up

Feb 29, 2024 CSRF WordPress Exploit GS Plugins

CVE-2023-51530 - Exploiting CSRF in GS Plugins Logo Slider – Showcase Your Logos, Expose Your Site

Summary: *CVE-2023-51530* is a Cross-Site Request Forgery (CSRF) vulnerability found in the WordPress plugin Logo Slider – Logo Showcase, Logo Carousel, Logo Gallery