WordPress Plugin – TheCyberThrone

WordPress Plugin GiveWP Bug CVE-2024-8353

A critical vulnerability has been discovered in the popular GiveWP donation plugin for WordPress, potentially allowing unauthenticated attackers to take complete control of affected websites. The vulnerability, tracked as CVE-2024-8353…

PravinKarthik October 2, 2024

TI WooCommerce Wishlist SQL Injection Vulnerability CVE-2024-43917

A critical security vulnerability has been discovered in the WordPress plugin, TI WooCommerce Wishlist, potentially exposing over 100,000 websites to malicious attacks that allows unauthenticated users to execute arbitrary SQL…

PravinKarthik September 30, 2024

WordPress LiteSpeed Cache plugin vulnerability CVE-2024-44000

Security researchers have identified that a WordPress plugin vulnerability could allow attackers to retrieve user cookies and potentially take over websites. The vulnerability tracked as CVE-2024-44000, exists in the popular…

PravinKarthik September 7, 2024

WordPress WPML Plugin Critical Vulnerability CVE-2024-6386

Researchers have uncovered a critical vulnerability in WPML multilingual CMS Plugin for WordPress that leads to a Remote Code Execution, which potentially allows the compromise of impacted websites. The vulnerability…

PravinKarthik August 28, 2024

CVE-2023-4596 – WordPress Forminator Plugin Bug

A critical vulnerability has been found in Forminator that could allow unauthenticated attackers to upload arbitrary files to the affected site’s server. The vulnerability, tracked as CVE-2023-4596, with a CVSS…

PravinKarthik August 31, 2023

Ninja Forms Plugin Vulnerabilities

Researchers have identified multiple vulnerabilities in the Ninja Forms plugin for WordPress that have more than 900,000 active installations, mainly using to create any type of form, including contact forms…

PravinKarthik July 31, 2023

AIOS WordPress Plugin Bug

All-In-One Security (AIOS), a plugin active on more than a million WordPress sites, was found to be logging plaintext passwords from login attempts in the database and has patched the…

PravinKarthik July 14, 2023

WordPress Ultimate Member Plugin Vulnerability

Researchers have spotted the threat actors are exploiting a critical unpatched security vulnerability in the WordPress Ultimate Member plugin. The flaw, tracked as CVE-2023-3460 with a CVSS score: 9.8, impacts…

PravinKarthik July 1, 2023