WordPress Archives

Palo Alto Networks: Network Security Trends report highlights common RCE vulnerability exploits against web apps

Cybersecurity Articles, Cybersecurity Attacks, Vulnerabilities & Exploits / Frank Crast / August 20, 2022 / CVE-2021-20166, CVE-2021-20167, CVE-2021-21881, CVE-2021-24762, CVE-2021-28169, CVE-2021-31589, CVE-2021-39226, CVE-2021-4045, CVE-2021-43711, CVE-2022-21371, CVE-2022-21662, CVE-2022-22536, CVE-2022-22947, CVE-2022-22954, CVE-2022-22963, CVE-2022-22965, CVE-2022-24112, CVE-2022-24260, CVE-2022-25060, CVE-2022-25075, CVE-2022-25134, CVE-2022-27226, CVE-2022-29464, Palo Alto Networks, SAP, Spring, Unit 42, VMware, WordPress

Palo Alto Networks Unit 42 researchers released a new report “Network Security Trends” that highlights how attackers are exploiting remote code execution (RCE), cross-site scripting (XSS), traversal and information disclosure vulnerabilities in multiple vendor products.

Palo Alto Networks: Network Security Trends report highlights common RCE vulnerability exploits against web apps Read More »

WordPress security update (5.9.2) fixes 3 vulnerabilities

Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / March 19, 2022 / jQuery, Prototype, WordPress, WordPress 5.9.2

WordPress has released WordPress 5.9.2 security and maintenance update that includes fixes for three vulnerabilities.

WordPress security update (5.9.2) fixes 3 vulnerabilities Read More »

Severe vulnerability found in WordPress plugin backup utility UpdraftPlus

Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / February 20, 2022 / Backup, CVE-2022-23303, UpdraftPlus, Wordfence, WordPress

A security researcher has discovered a severe vulnerability in WordPress plugin backup utility UpdraftPlus that could allow an attacker to potentially steal sensitive information from backups.

Severe vulnerability found in WordPress plugin backup utility UpdraftPlus Read More »

WordPress security update (5.8.3) fixes 4 vulnerabilities

Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / January 10, 2022 / Tatum, WordPress, WP_Query

WordPress has released WordPress 5.8.3 security and maintenance update that includes fixes for 4 security vulnerabilities.

WordPress security update (5.8.3) fixes 4 vulnerabilities Read More »

WordPress security update (5.8.1) fixes 3 vulnerabilities

Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / September 11, 2021 / Rest API, WordPress, WordPress 5.8.1, XSS

WordPress has released WordPress 5.8.1 security and maintenance update that includes fixes for 3 security vulnerabilities and 60 bugs. All WordPress versions between 5.4 and 5. 8 are affected.

WordPress security update (5.8.1) fixes 3 vulnerabilities Read More »

Critical WooCommerce SQL-injection vulnerability patched

Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / July 17, 2021 / eCommerce, WooCommerce, WordPress

A researcher has discovered a Critical SQL-injection vulnerability in WooCommerce, an open-source e-commerce plugin for WordPress. WooCommerce promptly provided an emergency patch for the plugin to fix the issue.

Critical WooCommerce SQL-injection vulnerability patched Read More »

WordPress security update (5.7.2) fixes 2 PHPMailer vulnerabilities

Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / May 14, 2021 / CVE-2018-19296, CVE-2020-36326, NIST, PHPMailer, WordPress

WordPress has released WordPress 5.7.2 security and maintenance update that includes fixes for two PHPMailer security vulnerabilities. All WordPress versions between 3.7 and 5.7 are affected.

WordPress security update (5.7.2) fixes 2 PHPMailer vulnerabilities Read More »

WordPress security update (5.7.1) fixes 2 vulnerabilities

Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / April 16, 2021 / Esperanza, PHP 8, Rest API, WordPress, WordPress 5.7, XXE

WordPress has released WordPress 5.7.1 security and maintenance update that includes fixes for two security vulnerabilities. All WordPress versions between 4.7 and 5.7 are affected.

WordPress security update (5.7.1) fixes 2 vulnerabilities Read More »