privilege escalation

Author's position will be here

privilege escalation

Latest WordPress Security 101 Plugin recommendations Security advisories Patchstack news Case studies Bug bounty

23 December, 2024

Multiple Critical Vulnerabilities Patched in WPLMS and VibeBP Plugins

                arbitrary file upload            

                theme            

                SQL Injection            

                ENVATO            

                Critical Vulnerability            

                privilege escalation

12 December, 2024

Multiple Critical Vulnerabilities Patched in Woffice Theme

                Critical Vulnerability            

                privilege escalation            

                account takeover            

                theme            

                ENVATO

5 December, 2024

Unauthenticated Privilege Escalation Vulnerability Patched in Sweet Date Theme

                Critical Vulnerability            

                privilege escalation            

                ENVATO            

29 October, 2024

Rare Case of Privilege Escalation Patched in LiteSpeed Cache Plugin

                privilege escalation            

                LiteSpeed Cache            

                zeroday            

17 October, 2024

Critical Vulnerabilities in Ultimate Membership Pro Plugin

                privilege escalation            

                php object injection            

23 September, 2024

Privilege Escalation Vulnerability Patched in Houzez Theme

                Houzez            

                privilege escalation            

                theme            

21 August, 2024

Critical Privilege Escalation in LiteSpeed Cache Plugin Affecting 5+ Million Sites

                Critical Vulnerability            

                privilege escalation            

                LiteSpeed Cache            

                zeroday

6 June, 2024

Multiple Vulnerabilities in WooCommerce Amazon Affiliates Plugin

                SQL Injection            

                arbitrary option update            

                WZone            

                ENVATO            

                privilege escalation

22 May, 2024

Critical Vulnerability Patched in UserPro Plugin

                Critical Vulnerability            

                privilege escalation            

                account takeover            

                UserPro

7 May, 2024

High Priority Vulnerabilities Patched in Uncode Core Plugin

                plugin            

                privilege escalation            

                Uncode            

                arbitrary file deletion

4 April, 2024

Unpatched Authenticated RCE in Oxygen and Breakdance Builder

                privilege escalation            

                rce            

                oxygen            

                breakdance            

                remote code execution

12 December, 2023

Multiple Vulnerabilities Patched in Themify Ultra Theme

                theme            

                themify            

                settings change            

                privilege escalation            

                arbitrary file upload            

                php object injection

1 2 Next »

privilege escalation

privilege escalation

Multiple Critical Vulnerabilities Patched in WPLMS and VibeBP Plugins

Multiple Critical Vulnerabilities Patched in Woffice Theme

Unauthenticated Privilege Escalation Vulnerability Patched in Sweet Date Theme

Rare Case of Privilege Escalation Patched in LiteSpeed Cache Plugin

Critical Vulnerabilities in Ultimate Membership Pro Plugin

Privilege Escalation Vulnerability Patched in Houzez Theme

Critical Privilege Escalation in LiteSpeed Cache Plugin Affecting 5+ Million Sites

Multiple Vulnerabilities in WooCommerce Amazon Affiliates Plugin

Critical Vulnerability Patched in UserPro Plugin

High Priority Vulnerabilities Patched in Uncode Core Plugin

Unpatched Authenticated RCE in Oxygen and Breakdance Builder

Multiple Vulnerabilities Patched in Themify Ultra Theme

Weekly security advice

Website security

For plugin devs

For researchers

Resources

Patchstack

Socials

Website security

For plugin devs

For researchers

Resources

Patchstack

Socials