all InfoSec news
Arbitrary script injections possible with WP-Members plugin flaw
April 3, 2024, 1:41 p.m. | SC Staff
SC Magazine feed for Strategy www.scmagazine.com
More than 60,000 WordPress sites with the WP-Members Membership Plugin could be compromised with arbitrary script injections due to a high-severity cross-site scripting vulnerability, tracked as CVE-2024-1852, reports SecurityWeek.
application security cloud security compromised cross-site cve cve-2024 cve-2024-1852 flaw high plugin reports script scripting severity third-party-code vulnerability wordpress wordpress sites wp-members
More from www.scmagazine.com / SC Magazine feed for Strategy
Jobs in InfoSec / Cybersecurity
Social Engineer For Reverse Engineering Exploit Study
@ Independent study | Remote
Associate Manager, BPT Infrastructure & Ops (Security Engineer)
@ SC Johnson | PHL - Makati
Cybersecurity Analyst - Project Bound
@ NextEra Energy | Jupiter, FL, US, 33478
Lead Cyber Security Operations Center (SOC) Analyst
@ State Street | Quincy, Massachusetts
Junior Information Security Coordinator (Internship)
@ Garrison Technology | London, Waterloo, England, United Kingdom
Sr. Security Engineer
@ ScienceLogic | Reston, VA