CVE-2024-5020: Multiple WordPress Plugins Vulnerable to Stored Cross-Site Scripting (XSS) via FancyBox JavaScript Library
Security researchers have discovered a critical vulnerability, CVE-2024-5020, in multiple plugins for WordPress, including versions 1.3.4 to 3.5.7 of the FancyBox
CVE-2024-8672 - Remote Code Execution Vulnerability in Widget Options WordPress Plugin
A critical vulnerability has been discovered in the Widget Options – The #1 WordPress Widget & Block Control Plugin for WordPress. The vulnerability allows authenticated attackers
CVE-2024-10781: Arbitrary Plugin Installation Vulnerability in Spam protection, Anti-Spam, FireWall by CleanTalk WordPress Plugin
Introduction:
The popular Spam protection, Anti-Spam, FireWall by CleanTalk plugin for WordPress has been discovered to possess a security vulnerability up to and including the
CVE-2024-10542 - Unauthorized Arbitrary Plugin Installation Vulnerability in Spam Protection, Anti-Spam, FireWall by CleanTalk Plugin for WordPress
--
The Spam protection, Anti-Spam, FireWall by CleanTalk plugin for WordPress, a popular plugin for protecting WordPress websites from spam, is found to be vulnerable
CVE-2024-10873 - Local File Inclusion Vulnerability in LA-Studio Element Kit for Elementor Up to 1.4.2 for WordPress
Recently, a critical vulnerability, assigned the identifier CVE-2024-10873, has been discovered in the popular LA-Studio Element Kit for Elementor plugin for WordPress. This post aims
Episode
00:00:00
00:00:00