CVE-2021-24867

CVE-2021-24867 relates to backdoored AccessPress Themes plugins/themes distributed via the vendor site (not from wordpress.org). The vulnerability was exploited in the wild to deploy web shells and site defacements, observed by Talos IR as part of initial access through exploitation of a WordPres...

CVE-2023-28661

CVE-2023-28661 concerns the WordPress plugin WP Popup Banners (versions ≤ 1.2.5). The vulnerability is an authenticated SQL injection in the get_popup_data action via the value parameter. It is documented as affecting the plugin with a CVSS v3.1 score of 8.8 (High) and impact on confidentiality, ...