A security vulnerability tracked as CVE-2024-13784 has been found in the ARForms plugin for WordPress, a popular tool used to build contact forms, surveys, quizzes and popups on WordPress sites. The flaw lets people who do not have login access to your website (unauthenticated attackers) inject malicious code into the plugin by submitting ...
Continue reading
A security vulnerability has been identified in the Pods – Custom Content Types and Fields plugin for WordPress, a tool many site owners use to build custom content types and field structures for their sites. The flaw impacts all versions of the plugin up to and including 3.3.9.
The issue stems from a bug in how the plugin runs its standard ...
Continue reading
A security flaw tracked as CVE-2024-13784 has been identified in the Contact Form, Survey, Quiz & Popup Form Builder – ARForms plugin for WordPress. The flaw impacts all versions of the plugin up to and including version 1.8.5, and allows unauthenticated attackers (people who do not have login access to your website) to send specially crafted ...
Continue reading
A security flaw has been found in the Solace Extra plugin for WordPress, affecting all versions up to and including 1.6.0. The issue comes from a missing permission check that lets even low-level logged-in users (such as Subscribers, who normally only have read-only access to your site) run restricted site actions they are not supposed to be able ...
Continue reading
