wordpress

4M+ WordPress Sites Vulnerable After Plugin Flaw

wordpress

4M+ WordPress Sites Vulnerable After Plugin Flaw

FHN November 15, 2024

Critical flaw found in ‘Really Simple Security’ WordPress plugin, risking 4M+ sites. CVE-2024-10924 allows potential remote attacks...

Unauthenticated RCE in WordPress Plugin Exposes 100K Sites AdobeStock_509692496_Editorial_Use_Only_50_1_50_1_34

AdobeStock_509692496_Editorial_Use_Only_50_1_50_1_34

Unauthenticated RCE in WordPress Plugin Exposes 100K Sites

FHN August 21, 2024

A critical vulnerability (CVE-2024-5932) in the GiveWP plugin exposes over 100,000 WordPress sites to remote code execution...

XSS Vulnerability in Yoast SEO Plugin Endangers Over 5 Million WordPress Websites wordpress-g74a560834_1280

wordpress-g74a560834_1280

XSS Vulnerability in Yoast SEO Plugin Endangers Over 5 Million WordPress Websites

FHN May 8, 2024

Security researcher Bassem Essam uncovered a critical cross-site scripting (XSS) vulnerability in the widely-used Yoast SEO WordPress...

LiteSpeed Plugin Vulnerability Exposes 5 Million WordPress Sites to Risk

wordpress

LiteSpeed Plugin Vulnerability Exposes 5 Million WordPress Sites to Risk

FHN February 27, 2024

Researchers at Patchstack have issued a warning regarding an unauthenticated site-wide stored XSS vulnerability, identified as CVE-2023-40000,...

WordPress Ninja Forms: Flaw in plugin allows data theft wordpress0-1060x424-1

wordpress0-1060x424-1

WordPress Ninja Forms: Flaw in plugin allows data theft

FHN July 31, 2023

The renowned WordPress form plugin, Ninja Forms, has been identified to have three vulnerabilities that might grant...