Spremljamo ranljivosti v izdelkih največjih proizvajalcev, kot so Microsoft, Cisco, Fortinet, Citrix in drugi. Izberite proizvajalca za seznam njegovih aktivnih ranljivosti in naših člankov.
Wordpress: ranljivosti v zadnjem letu
| CVE | CVSS | EPSS | CISA KEV | Proizvajalec | Opis (NVD, angleško) |
|---|---|---|---|---|---|
| CVE-2026-63030 | 9,8 Kritično | 10,6 % | Aktivno izkoriščana od 21. 7. 2026 | Wordpress | WordPress 6.9.x before 6.9.5 and 7.0.x before 7.0.2 is affected by a REST API batch endpoint route confusion issue which, combined with the author__not_in WP_Query SQL Injection (CVE-2026-60137), could allow an attacker to perform SQL Injection and achieve Rem |
| CVE-2026-60137 | 5,9 Srednje | 5,3 % | Aktivno izkoriščana od 21. 7. 2026 | Wordpress | WordPress 6.8.x before 6.8.6, 6.9.x before 6.9.5, and 7.0.x before 7.0.2 does not properly sanitise the author__not_in parameter of WP_Query, which could allow SQL Injection when a plugin or theme passes untrusted input to the parameter. |
Naši članki: Wordpress
CVE-2024-12859 BoomBox Theme Extensions WordPress Local File Inclusion Vulnerability
CVE-2024-12859, known as the “BoomBox Theme Extensions WordPress Local File Inclusion Vulnerability,” poses serious risks for website owners using the BoomBox Theme Extensions plugin for WordPress....
Summary of Vulnerability CVE-2024-13343: Privilege Escalation in WooCommerce Customers Manager for WordPress
The WooCommerce Customers Manager plugin for WordPress is currently facing a significant vulnerability, identified as CVE-2024-13343. This vulnerability stems from a missing capability check in its...
Vulnerability Analysis: CVE-2025-0682 ThemeREX Addons WordPress LFI
A critical WordPress vulnerability, identified as CVE-2025-0682, has surfaced in the ThemeREX Addons plugin, which impacts versions up to 2.33.0. This threat poses a significant risk...
Summary of CVE-2025-0357 WordPress WPBookit Plugin Arbitrary File Upload Vulnerability and Protection Measures
Understanding the Vulnerability in the WordPress WPBookit Plugin The recent discovery of the CVE-2025-0357 vulnerability in the WordPress WPBookit plugin raises significant concerns among website administrators...
CVE-2024-12857 AdForest WordPress Authentication Bypass Vulnerability and Recent Manufacturer’s Vulnerabilities
A critical vulnerability known as CVE-2024-12857 has recently come to light in the AdForest WordPress theme. Affecting all versions up to 5.1.8, this security flaw has...
Summary of CVE-2024-10936: WordPress String Locator PHP Object Injection Vulnerability
The recent discovery of a vulnerability in the WordPress String Locator plugin, known as CVE-2024-10936, highlights a significant security threat. This vulnerability, affecting all versions up...
Data Analysis and Protection Guide: Mitigating Vulnerabilities in WordPress Plugins
The recent discovery of a vulnerability in the WordPress PlugVersions plugin, identified as CVE-2024-12881, underscores a significant risk for WordPress users. This vulnerability allows for arbitrary...
WordPress Plugin Security Vulnerabilities and Protection Measures: **CVE-2024-12287 Biagiotti Membership Plugin vs. Recent Threats**
The Biagiotti Membership plugin for WordPress has recently been impacted by a critical security risk known as CVE-2024-12287. This authentication bypass vulnerability, discovered in versions up...
Security Alert: WordPress RepairBuddy Plugin Vulnerability and How to Protect Your Website
The CVE-2024-12259 vulnerability in the WordPress RepairBuddy plugin is a concerning privilege escalation threat. This flaw allows attackers to take over user accounts easily, as it...