WordPress - CVE CyberSecurity Database News (Page 77)

Feb 29, 2024 CSRF WordPress Exploit SQL PHP Manish Kumar Agarwal Change Table Prefix

CVE-2024-25932 - How CSRF Left Change Table Prefix WordPress Plugin Wide Open (Full Exploit Walkthrough)

On February 2024, the cybersecurity community uncovered a serious Cross-Site Request Forgery (CSRF) vulnerability, tracked as CVE-2024-25932, in the popular *Change Table Prefix* WordPress plugin

Feb 29, 2024 CSS CSRF WordPress PHP W3speedster

CVE-2024-24708 - CSRF in W3SPEEDSTER Up to 7.19 — What You Need to Know (With Exploit Example)

A fresh CVE dropped on the WordPress scene — CVE-2024-24708 — affects any site running the popular W3SPEEDSTER optimization plugin, versions up to and including 7.19.

Feb 29, 2024 CSRF WordPress Exploit M&S Consulting Email Before Download

CVE-2024-23519 - Easy Exploit Guide for CSRF Vulnerability in M&S Consulting Email Before Download Plugin

--- If you run a WordPress website and use the “Email Before Download” plugin by M&S Consulting, you’ll want to hear about

Feb 29, 2024 XSS WordPress Exploit PHP

CVE-2024-21724 - Inadequate Input Validation in Media Selection Fields Leads to XSS Across Popular Extensions

In early 2024, security researchers uncovered a significant vulnerability — now tracked as CVE-2024-21724 — affecting a wide range of content management system (CMS) extensions that use

Feb 29, 2024 WordPress Exploit Google wpWax Directorist – WordPress Business Directory Plugin with Classified Ads Listings

CVE-2024-1322 - Exploiting the Directorist WordPress Plugin Vulnerability for Unauthorized Data Modification

In February 2024, a critical vulnerability, CVE-2024-1322, was discovered in the popular Directorist – WordPress Business Directory Plugin with Classified Ads Listings (up to version 7.