WordPress - CVE CyberSecurity Database News (Page 79)

Feb 28, 2024 CSRF WordPress Duplicator Duplicator – WordPress Migration & Backup Plugin

CVE-2023-51681 - CSRF Vulnerability in Duplicator – WordPress Migration & Backup Plugin Explained (With PoC)

In January 2024, a serious security vulnerability was disclosed in the popular WordPress plugin, Duplicator – WordPress Migration & Backup. Identified as CVE-2023-51681, this flaw is

Feb 28, 2024 CSRF WordPress PHP Octa Code Accessibility

CVE-2024-24705 - Cross-Site Request Forgery (CSRF) Vulnerability in Octa Code Accessibility (≤1..6) — Explained with Exploit Example

CVE-2024-24705 is a Cross-Site Request Forgery (CSRF) vulnerability found in the Octa Code Accessibility plugin, affecting versions up to 1..6. This flaw can allow

Feb 28, 2024 CSRF WordPress Exploit Matt Martz & Andy Stratton Page Restrict

CVE-2024-24702 - Exploiting CSRF in Page Restrict WordPress Plugin (n/a–2.5.5)

CVE-2024-24702 highlights a security concern in the popular WordPress plugin, Page Restrict, developed by Matt Martz & Andy Stratton. If you’re running any version

Feb 28, 2024 WordPress Exploit SQL Joel Starnes postMash – custom post order

CVE-2024-25927 - SQL Injection in postMash – Custom Post Order (Joel Starnes) Explained

TL;DR: CVE-2024-25927 is an SQL Injection vulnerability in the WordPress plugin "postMash – custom post order" by Joel Starnes. This flaw can allow

Feb 28, 2024 WordPress Exploit SQL PHP Smartypants SP Project & Document Manager

CVE-2024-24868 - SQL Injection Vulnerability in Smartypants SP Project & Document Manager (Through 4.69)

If you are managing files or projects using the Smartypants SP Project & Document Manager, you need to read this. A new critical vulnerability, CVE-2024-24868,