On August 14, 2023, the Wordfence Threat Intelligence team discovered a critical stored Cross-Site Scripting (XSS) vulnerability in the LiteSpeed Cache plugin, one of the most popular WordPress cache plugins...
A critical vulnerability has been discovered in one of WordPress’s most popular Elementor plugins, Essential Addons for Elementor. This vulnerability could allow remote attackers to gain administrator privileges on affected...
A critical security vulnerability has been discovered in the Stripe Payment Plugin for WooCommerce that could allow an unauthenticated attacker to log in as any user who has placed an...
Today we bring to you an urgent security update concerning the well-known WordPress plugin ‘Abandoned Cart Lite for WooCommerce,’ a tool that more than 30,000 websites across the globe have...
An authentication bypass vulnerability has been found in the MStore API WordPress plugin. Identified as CVE-2023-2732 and assigned a troubling Common Vulnerability Scoring System (CVSS) score of 9.8, this security...
In a recent turn of events, Rafie Muhammad from Patchstack stumbled upon a critical vulnerability CVE-2023-32960 (with a CVSS score of 7.1), in WordPress’s beloved backup plugin, UpdraftPlus. This ubiquitous...
WordPress, one of the world’s most popular content management systems, powers over 40% of all websites worldwide. Within its vast ecosystem, plugins are indispensable tools that extend functionality and improve...
The world of digital e-commerce has experienced rapid growth, with many businesses relying on powerful plugins to manage their online stores. WordPress’s Easy Digital Downloads (EDD) plugin is a popular...
Quiz and Survey Master, a widely-used WordPress plugin with over 40,000 active installations, is now facing a critical security vulnerability. Known for its capability to create engaging content such as...
A new, unauthenticated stored Cross-Site Scripting (XSS) vulnerability has been identified in the popular WordPress plugin Limit Login Attempts, which is installed on over 600,000 websites. The plugin, designed to...
A critical security vulnerability has been identified in the popular WCFM Membership plugin, posing a severe risk to over 20,000 websites that have installed it. This plugin, designed to offer...
A critical flaw in the Premium Gift Cards WordPress plugin is being actively exploited in the wild, potentially allowing malicious actors to completely take over affected sites. YITH WooCommerce Gift...
W3Techs released the latest CMS content management system’s popularity statistics report and found that Alexa ranked top ten million websites, about 50.2% of the site does not run any CMS system, and...
According to securityaffairs, January 23 news, security researchers recently released WordPress plugin and theme of vulnerability statistics in 2017, these data from the latest WordPress Vulnerability Database ThreatPress. It is reported that...
According to foreign media reports on December 26, 14 WordPress malicious plugin discovered and deleted by the WordPress team in 2014 is still used by hundreds of websites. These malicious plug-ins may allow...
Support Securityonline.info site. Thanks!
CVE-2024-42057: Exploited by Helldown Ransomware to Target Linux
November 19, 2024