WordPress - CVE CyberSecurity Database News (Page 99)

Nov 22, 2023 WordPress Exploit chrisbadgett LifterLMS – WordPress LMS Plugin for eLearning

CVE-2023-6160 - LifterLMS WordPress Plugin Directory Traversal Vulnerabilities Affecting Versions Up to 7.4.2

The popular LifterLMS – WordPress LMS Plugin for eLearning has been found to have a security vulnerability affecting versions up to and including 7.4.2.

Nov 22, 2023 WordPress Exploit PHP glenwpcoder Drag and Drop Multiple File Upload – Contact Form 7

CVE-2023-5822 - Unrestricted File Upload Vulnerability in WordPress Drag and Drop Multiple File Upload – Contact Form 7 Plugin

The WordPress plugin “Drag and Drop Multiple File Upload – Contact Form 7” has been widely adopted by site admins to offer smooth file uploads for

Nov 22, 2023 XSS WordPress wpchill CPO Shortcodes

CVE-2023-5704 - Stored XSS Vulnerability in CPO Shortcodes Plugin for WordPress – How It Works, Exploit Demo, and Solutions

In late 2023, a major security flaw was uncovered in a widely used WordPress plugin named CPO Shortcodes (by Macho Themes), exposing hundreds of thousands

Nov 22, 2023 XSS WordPress plerdy Website Optimization – Plerdy

CVE-2023-5715 - How Admins Could Compromise Multi-Site WordPress with Plerdy Plugin’s Stored XSS Vulnerability

--- Introduction Security is crucial for WordPress websites, especially on multi-site setups where administrators have significant control. Recently, a vulnerability tracked as CVE-2023-5715

Nov 22, 2023 CSS XSS WordPress Exploit vektor-inc VK Blocks

CVE-2023-5706 - How VK Blocks Plugin for WordPress Exposes Your Site to Stored XSS Attacks

WordPress is the world’s most popular content management system, but its popularity also makes it a massive target for hackers. Whenever a plugin has