Search cyberveille.decio.ch

Found 7 bookmarks

Newest

Security Flaw in WP-Members Plugin Leads to Script Injection

Attackers could exploit a high-severity cross-site Scripting (XSS) vulnerability in the WP-Members Membership WordPress plugin to inject arbitrary scripts into web pages, according to an advisory from security firm Defiant.

#securityweek #EN #2024 #plugin #WP #Wordpress #WP-Members #Injection #vulnerability

·securityweek.com·Apr 4, 2024

Security Flaw in WP-Members Plugin Leads to Script Injection

Balada Injector Infects Over 7,100 WordPress Sites Using Plugin Vulnerability

Over 7,100 WordPress sites have been hit by the 'Balada Injector' malware, which exploits sites using a vulnerable version of the Popup Builder plugin

#thehackernews #2024 #EN #Balada #WP #plugin #WordPress #malware #Injector #infected

·thehackernews.com·Jan 20, 2024

Balada Injector Infects Over 7,100 WordPress Sites Using Plugin Vulnerability

Balada Injector Targets Unpatched tagDiv Plugin, Newspaper Theme & WordPress Admins

Discover the latest waves of the ongoing Balada Injector malware campaign targeting unpatched tagDiv premium WordPress themes. Dive into the technical details of the injected scripts, explore their functionality, and understand the potential threats they pose to site administrators.

#sucuri #2023 #EN #WP #Wordpress #Balada #Injector #tagDiv #Plugin

·blog.sucuri.net·Oct 13, 2023

Balada Injector Targets Unpatched tagDiv Plugin, Newspaper Theme & WordPress Admins

New Magecart-Style Campaign Abusing Legitimate Websites to Attack Others | Akamai

Akamai researchers have identified a new Magecart-style skimmer campaign that hides behind legitimate website domains to steal PII and credit card information.

#akamai #EN #2023 #Research #Magecart #skimmer #campaign #WP

·akamai.com·Jun 5, 2023

New Magecart-Style Campaign Abusing Legitimate Websites to Attack Others | Akamai

‘Gravity Forms’ WordPress Plugin Found Vulnerable to PHP Object Injection

Gravity Forms, a popular WordPress plugin, has been found vulnerable to unauthenticated PHP Object Injection attacks.

#bitdefender #EN #2023 #WP #WordPress #Plugin #gravity-forms #CVE-2023-28782

·bitdefender.com·Jun 4, 2023

‘Gravity Forms’ WordPress Plugin Found Vulnerable to PHP Object Injection

Critical Privilege Escalation in Essential Addons for Elementor Plugin Affecting 1+ Million Sites

This blog post is about the Essential Addons for Elementor plugin vulnerability. If you’re a Essential Addons for Elementor user, please update the plugin to at least version 5.7.2. Patchstack Developer and Business plan users are protected from the vulnerability. You can also sign up for the Patchstack Community plan to be notified about vulnerabilities […]

#patchstack #EN #2023 #WP #Wordpress #Elementor

·patchstack.com·May 12, 2023

Critical Privilege Escalation in Essential Addons for Elementor Plugin Affecting 1+ Million Sites

WordPress Advanced Custom Fields Pro plugin 6.1.5 - Reflected Cross Site Scripting (XSS) vulnerability

Rafie Muhammad (Patchstack) discovered and reported this Cross Site Scripting (XSS) vulnerability in WordPress Advanced Custom Fields PRO Plugin. This could allow a malicious actor to inject malicious scripts, such as redirects, advertisements, and other HTML payloads into your website which will be executed when guests visit your site. This vulnerability has been fixed in version 6.1.6.

#patchstack #EN #2023 #WP #CVE-2023-30777 #Advanced #Custom #Fields #Pro #plugin #XSS #vulnerability #Wordpress

·patchstack.com·May 8, 2023

WordPress Advanced Custom Fields Pro plugin 6.1.5 - Reflected Cross Site Scripting (XSS) vulnerability