Stay up to date with WordPress Security

<

PHP Object Injection vulnerability in WordPress Themesflat Addons For Elementor Plugin

August 7, 2023

A PHP Object Injection vulnerability has been identified in the WordPress Themesflat Addons For Elementor Plugin. This vulnerability allows an attacker to

Read more

Medium-severity Cross-Site Scripting (XSS) vulnerability in WordPress Simple Share Follow Button plugin

August 3, 2023

A Cross-Site Scripting (XSS) vulnerability has been identified in the WordPress Simple Share Follow Button plugin. This vulnerability could allow an attacker

Read more

High-severity Sensitive Data Exposure vulnerability in WordPress WP Ultimate CSV Importer plugin

August 3, 2023

A Sensitive Data Exposure vulnerability has been identified in the WordPress WP Ultimate CSV Importer plugin. This vulnerability could allow an attacker

Read more

Remote Code Execution (RCE) Vulnerability in JetElements For Elementor Plugin

August 3, 2023

WordPress security is of utmost importance, and we want to bring attention to a critical Remote Code Execution (RCE) vulnerability discovered in

Read more

High-severity Remote Code Execution (RCE) vulnerability in WordPress WP Ultimate CSV Importer plugin

August 3, 2023

A Remote Code Execution (RCE) vulnerability has been identified in the WordPress WP Ultimate CSV Importer plugin. This vulnerability could allow an

Read more

Cross Site Scripting (XSS) Vulnerability in Bus Ticket Booking with Seat Reservation Plugin

August 2, 2023

A Cross-Site Scripting (XSS) vulnerability has been identified in the WordPress Bus Ticket Booking with Seat Reservation plugin. This vulnerability could allow

Read more

Critical Privilege Escalation vulnerability in Stripe Payment Gateway for WooCommerce Plugin

August 2, 2023

A critical Privilege Escalation vulnerability has been identified in the widely-used Stripe Payment Gateway for WooCommerce Plugin. This vulnerability could allow an

Read more

Cross-Site Scripting (XSS) Vulnerability in PostX – Gutenberg Blocks for Post Grid Plugin

August 2, 2023

We want to draw attention to a high-severity Cross-Site Scripting (XSS) vulnerability discovered in the widely used PostX – Gutenberg Blocks for

Read more

Top 5 Online WordPress Security & Malware Scanners in 2024

August 2, 2023

Discover the top online security scanners for WordPress websites in 2024. Evaluate and compare the best options to enhance your site’s protection

Read more

High-severity Privilege Escalation vulnerability in WordPress Shop as a Customer for WooCommerce plugin

August 1, 2023

A Privilege Escalation vulnerability has been identified in the WordPress Shop as a Customer for WooCommerce plugin. This vulnerability could allow an

Read more

Critical arbitrary file upload vulnerability in WordPress Job Board and Recruitment Plugin – JobWP plugin

August 1, 2023

A critical Arbitrary File Upload vulnerability has been uncovered in the widely-used WordPress Job Board and Recruitment Plugin – JobWP Plugin. This

Read more

High-severity Broken Access Control Vulnerability in Booster for WooCommerce Plugin

August 1, 2023

A Broken Access Control vulnerability has been identified in the Booster for WooCommerce Plugin. This vulnerability could allow an attacker to gain

Read more

Critical arbitrary file upload vulnerability in WordPress Job Board and Recruitment Plugin

August 1, 2023

An arbitrary file upload vulnerability has been identified in the WordPress Job Board and Recruitment Plugin – JobWP plugin. The Arbitrary File

Read more

Medium-severity Cross-Site Scripting (XSS) vulnerability in WordPress Simple Blog Card plugin

August 1, 2023

A Cross-Site Scripting (XSS) vulnerability has been identified in the WordPress Simple Blog Card plugin. This vulnerability could allow an attacker to

Read more

Immediate Action Required for Media from FTP Plugin

August 1, 2023

A Broken Access Control vulnerability has been identified in the WordPress Media from FTP plugin. This vulnerability could allow an unprivileged user

Read more