// category

WordPress (plugins & themes)

Opinion, technical notes and research on web development, servers, performance and cyber security.

The vulnerability allows unauthenticated attackers to upload executable files.

The ELEX WordPress HelpDesk plugin has a critical vulnerability allowing unauthorized code execution.

The Streamit WordPress plugin has a critical vulnerability that allows remote code execution.

The vulnerability allows arbitrary file uploads, including PHP, without validation.

The vulnerability allows unauthenticated users to delete arbitrary files on the server.

A critical vulnerability in the Woocommerce Wishlist plugin allows unauthenticated users to change site options.

A critical vulnerability allows unauthenticated users to upload malicious PHP files.

The vulnerability allows unauthenticated users to upload arbitrary files, including PHP, leading to potential remote code…

A critical vulnerability in the Basel Post Types plugin allows authentication bypass in WordPress.