Vulnerabilities In The WordPress Total Donations Plugin
The Wordfence Threat Intelligence team recently identified multiple critical vulnerabilities in the commercial Total Donations plugin for WordPress. These vulnerabilities,
Read More
WordPress
Privilege Escalation Flaw In WP GDPR Compliance Plugin
WordPress GDPR Compliance 1.4.3 is now available. This is a security release for all previous versions and we strongly encourage
Read More
WordPress Site Editor Plugin Path Traversal Vulnerability [CVE-2018-7422]
CVE number – CVE-2018-7422 A vulnerability in the Site Editor plugin for WordPress could allow an unauthenticated, remote attacker to
Read MoreWordPress Arbitrary File Deletion Vulnerability Exploit
Exploiting this vulnerability grants an attacker the capability to delete any file of the WordPress installation (and any other file
Read MoreBabaYaga The New Russian WordPress Malware Used For SEO Spam
Security researchers have discovered a new malware strain targeting WordPress sites that includes some pretty clever techniques, such as removing
Read MoreEmail Subscribers & Newsletters Plugin For WordPress Vulnerability [CVE-2018-0602]
CVE Number – CVE-2018-0602 Email Subscribers & Newsletters Plugin for WordPress is vulnerable to cross-site scripting, caused by improper validation
Read MoreBestWebSoft WordPress CAPTCHA Plugin Backdoor
A backdoor has been discovered in the popular WordPress plugin “Captcha free plugin”, by BestWebSoft. It has recently been sold
Read MoreThree WordPress Plugins Backdoored In Supply Chain Attack
In the last two weeks, the WordPress.org repository has closed three plugins because they contained content-injection backdoors. “Closing” a plugin
Read MoreWordPress SQL Injection Vulnerability
WordPress has recently released patch 4.8.3 to fix an SQL injection security vulnerability. This vulnerability concerned an exploit in which
Read MoreWordPress (Pre 4.8.3) SQL Injection Vulnerability
CVE-2017-16510 Detail WordPress before 4.8.3 is affected by an issue where $wpdb->prepare() can create unexpected and unsafe queries leading to
Read More