CVE-2023-6684

CVE-2023-6684 affects the Ibtana – WordPress Website Builder plugin for WordPress (IVE shortcode). Reported vulnerability: Stored XSS via width/height attributes in the ive shortcode, due to insufficient input sanitization and output escaping. Affected versions: up to 1.2.2. Attack requires authe...

Critical RCE Flaw Reported in WordPress Elementor Website Builder Plugin

Elementor, a WordPress website builder plugin with over five million active installations, has been found to be vulnerable to an authenticated remote code execution flaw that could be abused to take over affected websites. Plugin Vulnerabilities, which disclosed the flaw last week, said the bug w...