PHP - CVE CyberSecurity Database News (Page 5)

Dec 9, 2024 WordPress Exploit PHP

CVE-2023-47762 - Exploring the Missing Authorization Vulnerability in WPDeveloper BetterDocs that Allows Exploiting Incorrectly Configured Access Control Security Levels

The CVE-2023-47762 vulnerability sheds light on a security flaw found in the WPDeveloper BetterDocs plugin, widely used to create and manage online documentation on WordPress

Dec 9, 2024 WordPress Exploit PHP

CVE-2023-47760 - Missing Authorization Vulnerability in WPDeveloper Essential Blocks for Gutenberg Leads to Exploiting Incorrectly Configured Access Control Security Levels

--- The WPDeveloper Essential Blocks for Gutenberg WordPress plugin is a powerful set of customizable and extendable blocks to enhance Gutenberg's page-building capabilities.

Dec 9, 2024 WordPress Exploit PHP

CVE-2023-25714 - Missing Authorization Vulnerability in Fullworks Quick Paypal Payments Allows Exploiting Incorrectly Configured Access Control Security Levels

A newly discovered vulnerability in Fullworks Quick Paypal Payments (QPP) plugin can potentially expose a user's sensitive information to unauthorized third parties. This

Dec 8, 2024 WordPress Exploit PHP

CVE-2024-12209: Unauthenticated Local File Inclusion in WP Umbrella Plugin for WordPress

WordPress, as a widely used Content Management System (CMS), is often targeted by attackers due to its popularity and ease of exploitation. Many WordPress installations

Dec 7, 2024 XSS WordPress API Exploit PHP

CVE-2024-11380: Stored Cross-Site Scripting Vulnerability in Mini Program API Plugin for WordPress

As cyber-security continues to be a top priority, it is essential to stay informed about the latest vulnerabilities affecting popular technologies. This post will provide