PHP - CVE CyberSecurity Database News (Page 3)

Dec 9, 2024 WordPress PHP

CVE-2023-49850: Missing Authorization Vulnerability in Ashish Ajani WP Simple HTML Sitemap Allows Exploiting Incorrectly Configured Access Control Security Levels, Affecting Versions Up To 2.7

A recently discovered security vulnerability, tracked as CVE-2023-49850, affects the Ashish Ajani WP Simple HTML Sitemap plugin, potentially allowing malicious actors to exploit unauthorized access

Dec 9, 2024 WordPress Exploit PHP

CVE-2023-49831: Missing Authorization Vulnerability in Metagauss User Registration Forms RegistrationMagic Allows for Exploiting Incorrectly Configured Access Control Security Levels

Vulnerabilities in popular web applications leave thousands of websites, users, and their data prone to exploits and attacks. CVE-2023-49831 is one such vulnerability in the

Dec 9, 2024 WordPress Exploit PHP

CVE-2023-49758: Missing Authorization Vulnerability in Veribo- Roland Murg WP Booking System Compromises Security Through Incorrectly Configured Access Control Security Levels

A newly discovered security vulnerability, CVE-2023-49758, has been identified in the Veribo-Roland Murg WP Booking System, a widely used WordPress plugin for online reservation and

Dec 9, 2024 WordPress Exploit PHP

CVE-2023-49167 - Missing Authorization Vulnerability in Code4Life Database for CF7 Allows Exploiting Incorrectly Configured Access Control Security Levels

--- Introduction A newly discovered security vulnerability, tracked as CVE-2023-49167, has been identified in the Code4Life Database for Contact Form 7 (CF7) WordPress plugin. This

Dec 9, 2024 XSS Exploit PHP

CVE-2023-49158 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LadiPage LadiApp allows Stored XSS

A newly discovered vulnerability, designated as CVE-2023-49158, has been found in LadiPage's LadiApp. This vulnerability affects all versions of LadiApp up to 4.