A security vulnerability has been found in the Link Library plugin for WordPress, affecting all versions up to and including 7.9.4. The plugin does not properly validate file paths, which could let unauthenticated attackers delete files stored on your website’s server.
If attackers delete the right critical files—such as the core WordPress ...
Continue reading
A security flaw has been found in the Pods – Custom Content Types and Fields plugin for WordPress, a tool many sites use to manage custom content and fields. All versions of this plugin up to and including version 3.3.9 are affected by the issue.
The bug causes the plugin's security checks to be completely skipped, even for people who do not ...
Continue reading
A security flaw has been identified in the TrueBooker plugin for WordPress, impacting all versions of the plugin up to and including version 1.2.6. The issue allows anyone who visits your website, even if they are not logged in or have an account with you, to change the email address linked to any user on your WordPress site, including your ...
Continue reading
A security vulnerability exists in the WordPress User Profile Builder plugin, affecting all versions up to and including 3.16.4. The flaw is triggered when someone submits a site registration with a username that is 61 to 70 characters long, and it allows unauthenticated, unauthorized attackers to bypass normal login security to access your ...
Continue reading
