WordPress Core recently released v6.5.2, fixing a Stored Cross-Site Scripting issue in the Avatar block present in the 6.x versions. While investigating the patch made, we identified that it could lead to an Unauthenticated Stored Cross-Site Scripting issue in the worse case scenario, however this
Surge of JavaScript Malware in sites with vulnerable versions of LiteSpeed Cache Plugin
New Malware Campaign Targets WP-Automatic Plugin
The 16 Most Common Web Application Vulnerabilities Explained
Unauthenticated Stored XSS Fixed in WordPress Core
Stored XSS Fixed In Popup Builder 4.2.3
How to Perform a Website Security Audit [Checklist + Tools]
20 Website Vulnerabilities & Security Threats You Need to Know
Ninja Forms – The Contact Form Builder That Grows With You WordPress Plugin Security Vulnerabilities
The Ultimate WordPress Security Checklist
Newsletter Manager - Unauthenticated Open Redirect
WooCommerce Checkout Manager <= 4.2.6 - Arbitrary File Upload
Plainview Activity Monitor <= 20161228 - Remote Command Execution (RCE)
Open Graph for Facebook, Google+ and Twitter Card Tags <= 2.2.4.1 - Unauthenticated Cross-Site Scripting (XSS)