WordPress - CVE CyberSecurity Database News (Page 80)

Feb 28, 2024 WordPress Exploit SQL PHP Smartypants SP Project & Document Manager

CVE-2024-24868 - SQL Injection Vulnerability in Smartypants SP Project & Document Manager (Through 4.69)

If you are managing files or projects using the Smartypants SP Project & Document Manager, you need to read this. A new critical vulnerability, CVE-

Feb 28, 2024 WordPress Exploit SQL PHP miniOrange Malware Scanner

CVE-2024-25902 - Breaking Down the SQL Injection Vulnerability in miniorange Malware Scanner (Vulnerable up to 4.7.2)

In early 2024, a serious SQL Injection bug, tagged as CVE-2024-25902, was discovered in the popular miniorange Malware Scanner — a WordPress plugin known

Feb 28, 2024 XSS WordPress Exploit PHP Progress Software Corporation Sitefinity

CVE-2024-1636 - Potential Cross-Site Scripting (XSS) in Page Editing Areas — Exclusive Deep Dive & Exploit Example

CVE-2024-1636 is a recently disclosed security vulnerability affecting the page editing interface in popular content management systems (CMS), including (but not limited to)

Feb 28, 2024 WordPress API Exploit PHP

CVE-2024-1861 - Exploiting the Anti Hacker Scan Plugin Vulnerability in WordPress

The WordPress ecosystem is home to thousands of plugins. One such plugin — Disable Json API, Login Lockdown, XMLRPC, Pingback, Stop User Enumeration Anti Hacker Scan

Feb 28, 2024 CSRF WordPress Exploit PHP

CVE-2024-1954 - Critical CSRF Vulnerability in Oliver POS - What You Need to Know and Exploitation Details

TL;DR: A simple Cross-Site Request Forgery (CSRF) flaw in the Oliver POS WooCommerce plugin (up to version 2.4.1.8) allows remote