WordPress - CVE CyberSecurity Database News (Page 78)

CVE-2024-1322 - Exploiting the Directorist WordPress Plugin Vulnerability for Unauthorized Data Modification

In February 2024, a critical vulnerability, CVE-2024-1322, was discovered in the popular Directorist – WordPress Business Directory Plugin with Classified Ads Listings (up to

Feb 29, 2024 XSS WordPress Exploit

CVE-2024-0604 - Critical Stored XSS Vulnerability in FooGallery WordPress Plugin (≤2.4.7) – Exclusive Analysis & Exploit Walkthrough

--- Introduction WordPress sets the standard for website platforms, with plugins supercharging its functionality. But popularity also makes plugins a major attack vector. On January 2024,

Feb 28, 2024 CSRF WordPress Exploit Google bytesforall Atahualpa

CVE-2024-27948 - How a CSRF Vulnerability in Atahualpa WordPress Theme Puts Your Site at Risk

If you’re running a WordPress site and use the Atahualpa theme, then this post could save you from serious trouble. In March 2024, a

Feb 28, 2024 CSRF WordPress Exploit Ecwid Ecommerce Ecwid Ecommerce Shopping Cart

CVE-2023-51533 - Exploiting CSRF in Ecwid Ecommerce Shopping Cart (up to 6.12.4)

Ecwid Ecommerce Shopping Cart is a popular e-commerce plugin for many website platforms, letting users add online store functionality. CVE-2023-51533 is a

Feb 28, 2024 CSRF WordPress API PHP MailerLite MailerLite – WooCommerce integration

CVE-2023-52223 - Understanding and Exploiting the CSRF Vulnerability in MailerLite – WooCommerce Integration (<= 2..8)

In early 2024, a significant Cross-Site Request Forgery (CSRF) vulnerability was disclosed in the MailerLite – WooCommerce integration WordPress plugin, tracked as CVE-2023-52223.