Vulnerabilities

Stay ahead of the curve with our comprehensive coverage of WordPress plugin and theme vulnerabilities. Don’t let outdated software put your website at risk.

<

Critical XSS vulnerability in User Email Verification for WooCommerce Plugin

July 26, 2023

WordPress website owners using the User Email Verification for WooCommerce Plugin: A high severity Cross-Site Scripting (XSS) vulnerability has been identified, posing

Read more

High severity Cross-Site Scripting (XSS) vulnerability in JobWP Plugin

July 26, 2023

Attention WordPress website owners using the Job Board and Recruitment Plugin – JobWP Plugin: A high severity Cross-Site Scripting (XSS) vulnerability has

Read more

High-Severity XSS Vulnerability in AGP Font Awesome Collection Plugin

July 26, 2023

WordPress security remains a top priority as websites are frequently targeted by malicious actors exploiting vulnerabilities in plugins. In a recent discovery,

Read more

Critical Remote Code Execution (RCE) vulnerability in PHP Everywhere plugin

July 26, 2023

A critical Remote Code Execution (RCE) vulnerability has been identified in the PHP Everywhere plugin. This vulnerability could allow an attacker to

Read more

Cross-Site Request Forgery (CSRF) Vulnerability Found in WordPress tagDiv Composer Plugin

July 25, 2023

WordPress website administrators should be aware of a high severity Cross-Site Request Forgery (CSRF) vulnerability detected in the tagDiv Composer Plugin. This

Read more

Urgent Action Needed for Quasar Form Plugin

July 24, 2023

WordPress website owners using the Quasar Form plugin: An alarming high-severity SQL Injection vulnerability has been detected, posing significant risks to the

Read more

Urgent Action Required for Custom Field Template Plugin

July 24, 2023

Attention WordPress website owners using the Custom Field Template plugin: A high-severity Cross-Site Scripting (XSS) vulnerability has been identified, posing significant risks

Read more

Critical Broken Access Control Vulnerability in Convert Pro Plugin

July 21, 2023

WordPress website owners using the Convert Pro plugin are urged to take immediate action to address a critical Broken Access Control vulnerability,

Read more

High-severity Arbitrary File Download vulnerability in JupiterX Core plugin

July 20, 2023

Attention WordPress website owners using the JupiterX Core plugin: A high-severity Arbitrary File Download vulnerability has been identified, posing significant risks to

Read more

Critical SQL Injection Vulnerability in Subscribe to Category Plugin

July 20, 2023

WordPress website owners using the Subscribe to Category Plugin: An urgent security advisory has been issued for a critical SQL Injection vulnerability,

Read more

High-severity XSS vulnerability in eaSYNC plugin

July 20, 2023

A critical security issue has been identified in the eaSYNC Plugin for WordPress. A high-severity Cross-Site Scripting (XSS) vulnerability has been discovered

Read more

Mitigating High-Severity XSS Vulnerability in Event Tickets Plugin

July 19, 2023

Swift action is essential to protect your WordPress website from potential risks as a high-severity Cross-Site Scripting (XSS) vulnerability has been detected

Read more

Safeguard Your Website Against High-Severity XSS Vulnerability in 404 to 301 Plugin

July 19, 2023

Attention WordPress Website Owners, We are issuing an urgent security alert to all WordPress website owners using the 404 to 301 plugin.

Read more

Unpatched XSS Vulnerability in Post List With Featured Image Plugin

July 19, 2023

A critical Cross-Site Scripting (XSS) vulnerability has been discovered in the Post List With Featured Image plugin, posing significant risks to WordPress

Read more

Addressing High-Severity XSS Vulnerability in Easy Watermark Plugin

July 19, 2023

Urgent action is required to secure your WordPress website from potential risks as a high-severity Cross-Site Scripting (XSS) vulnerability has been uncovered

Read more