Stay up to date with WordPress Security

<

WordPress Icons Font Loader Plugin SQL Injection Vulnerability

October 16, 2023

A SQL Injection vulnerability has been discovered in the WordPress Icons Font Loader Plugin. This vulnerability could allow a malicious actor to

Read more

WordPress WooCommerce Ninja Forms Product Add-ons Plugin Arbitrary File Upload Vulnerability

October 16, 2023

A critical severity Arbitrary File Upload vulnerability has been discovered in the WordPress WooCommerce Ninja Forms Product Add-ons plugin. This vulnerability could

Read more

Critical Sensitive Data Exposure Vulnerability in WordPress WPvivid Backup and Migration Plugin

October 16, 2023

A Sensitive Data Exposure vulnerability has been discovered in the WordPress WPvivid Backup and Migration plugin. This vulnerability could allow an attacker

Read more

Arbitrary File Upload vulnerability in WordPress Royal Elementor Addons Plugin

October 14, 2023

A critical vulnerability has been identified in the WordPress Royal Elementor Addons plugin that could allow a malicious actor to upload any

Read more

Cross-Site Scripting (XSS) vulnerability in WordPress Libsyn Publisher Hub Plugin

October 13, 2023

A Cross-Site Scripting (XSS) vulnerability has been identified in the WordPress Libsyn Publisher Hub Plugin. This vulnerability could allow a malicious actor

Read more

Critical XSS Vulnerability in WordPress Ultimate Taxonomy Manager Plugin

October 13, 2023

A Cross-Site Scripting (XSS) vulnerability has been discovered in the WordPress Ultimate Taxonomy Manager Plugin. This vulnerability could allow a malicious actor

Read more

WordPress Accessibility Suite by Online ADA Plugin SQL Injection Vulnerability

October 13, 2023

A SQL injection vulnerability has been discovered in the WordPress Accessibility Suite by Online ADA plugin. This vulnerability could allow a malicious

Read more

Critical Cross-Site Scripting Vulnerability in Fast WP Speed Plugin

October 12, 2023

A critical Cross-Site Scripting (XSS) vulnerability has been identified in the Fast WP Speed plugin. This vulnerability could allow a malicious actor

Read more

WordPress Contact Form With Captcha Plugin Cross-Site Request Forgery (CSRF) Vulnerability

October 12, 2023

A Cross-Site Request Forgery (CSRF) vulnerability has been discovered in the WordPress Contact Form With Captcha plugin. This vulnerability could allow a

Read more

WordPress Proofreading Plugin Cross-Site Scripting Vulnerability

October 12, 2023

A Cross-Site Scripting (XSS) vulnerability has been discovered in the WordPress Proofreading Plugin. This vulnerability could allow a malicious actor to inject

Read more

SQL Injection vulnerability in WordPress iPanorama 360 WordPress Virtual Tour Builder Plugin

September 25, 2023

A SQL Injection vulnerability has been identified in the WordPress iPanorama 360 WordPress Virtual Tour Builder Plugin. This vulnerability could allow a

Read more

Cross-Site Scripting (XSS) vulnerability in WordPress Drag and Drop Multiple File Upload for WooCommerce Plugin

September 25, 2023

A Cross-Site Scripting (XSS) vulnerability has been identified in the WordPress Drag and Drop Multiple File Upload for WooCommerce plugin. This vulnerability

Read more

Arbitrary File Deletion vulnerability in WordPress WPvivid Backup and Migration Plugin

September 25, 2023

A vulnerability has been identified in the WordPress WPvivid Backup and Migration plugin that could allow a malicious actor to delete files

Read more

Privilege Escalation vulnerability in WordPress Simple Membership Plugin

September 25, 2023

A Privilege Escalation vulnerability has been identified in the WordPress Simple Membership Plugin. This vulnerability could allow a malicious actor to escalate

Read more

Privilege Escalation vulnerability in WordPress Simple Membership Plugin

September 25, 2023

A Privilege Escalation vulnerability has been identified in the WordPress Simple Membership Plugin. This vulnerability could allow a malicious actor to escalate

Read more