XSS Injection Campaign Exploits WordPress AMP Plugin

News broke last week disclosing a number of vulnerabilities in the AMP For WP plugin, installed on over 100,000 WordPress sites. WordPress contributor Sybre Waaijer identified the security issue and confidentially disclosed it to the WordPress plugins team. To exploit the flaw, an attacker needs to have a minimum of subscriber-level access on a vulnerable site. The Read More

Targeting Multiple Vulnerable WordPress Plugins

Second WordPress hacking campaign underway, this one targeting AMP

Security Vulnerability In WooCommerce 3.4.5 - UPDATE NOW < WooCamp

Zeroday for WordPress plugin

WordPress Vulnerability Report — November 29, 2023 - SolidWP

Exploit XSS Injections in a one-line powerful Technique

30 best WordPress plugins to improve your website in 2023

AMP for WP-Accelerated Mobile Pages Security Bypass (0.9.97.19

Exploiting XSS - Injecting into Scriptable Contexts - PortSwigger

Cross-Site Scripting: The Real WordPress Supervillain

Cross-Site Scripting: The Real WordPress Supervillain