WordPress - CVE CyberSecurity Database News (Page 98)

Nov 22, 2023 XSS WordPress PHP MagePeople Team WpBusTicketly

CVE-2023-30496 - Cross-site Scripting (XSS) in MagePeople Team WpBusTicketly Plugin (≤ 5.2.5) – Deep Dive, Exploit Details, and Mitigation

In the ever-changing world of WordPress plugins, security should never be an afterthought. Today we'll break down CVE-2023-30496, an "Improper Neutralization of

Nov 22, 2023 CSRF WordPress Exploit PHP PeepSo Download Community by PeepSo

CVE-2023-39925 - Unpacking a CSRF Vulnerability in PeepSo Download Community (<= 6.1.6.) — What You Need To Know

*PeepSo Download Community* by PeepSo is a popular WordPress plugin that adds social networking features to websites. However, security researchers recently discovered a Cross-Site Request

Nov 22, 2023 CSRF WordPress Infinite Uploads Big File Uploads – Increase Maximum File Upload Size

CVE-2023-47792 - How a CSRF Flaw in Big File Uploads Plugin Could Let Attackers Change Your WordPress Settings

If you use WordPress to run your website, you probably know how hard it can be to upload large files. That’s where plugins like

Nov 22, 2023 WordPress Exploit Userproplugin Userpro

CVE-2023-6007 - How Hackers Exploit UserPro WordPress Plugin to Steal, Change, or Delete Your Data

If you run a WordPress site, keeping plugins updated and secure is a must. Recently, a major security problem was found in the popular UserPro

Nov 22, 2023 WordPress Exploit chrisbadgett LifterLMS – WordPress LMS Plugin for eLearning

CVE-2023-6160 - LifterLMS WordPress Plugin Directory Traversal Vulnerabilities Affecting Versions Up to 7.4.2

The popular LifterLMS – WordPress LMS Plugin for eLearning has been found to have a security vulnerability affecting versions up to and including 7.4.2.