Essential Addons News Today

XSS vulnerabilities in Essential Addons for Elementor could allow attackers to inject malicious scripts into WordPress websites

Several versions of the WordPress plugin Essential Addons for Elementor impacted by the now-addressed critical CVE-2023-32243 vulnerability are being actively scanned and targeted by threat actors following the release of proof-of-concept exploit, according to BleepingComputer.

Welcome to Cyber Security Today. This is the Week in Review edition for the week ending Friday, May 19th, 2023. I'm Howard Solomon, contributing reporter on cybersecurity for ITWorldCanada.com and TechNewsday.com in the U.S. In a few minutes David Shipley of New Brunswick's Beauceron Security will be here to discuss recent news. But first a

An Elementor library, used by a million WordPress websites, allowed attackers to reset anyones password.

A popular plugin for WordPress website builder Elementor has a serious security flaw.

The privilege escalation flaw is one in thousands that researchers have disclosed in recent years.

A successful attacker could use the SSRF vulnerability to collect metadata from WordPress sites hosted on an AWS server, and potentially log in to a cloud instance to run commands.

A flaw in the Elementor plugin allows any authenticated user to upload arbitrary PHP code.

Now-patched issue in Essential Addons for Elementor gives attackers a way to carry out local file inclusion attacks, researchers say.

This episode reports on critical firmware bugs found in products from major IT manufacturers, another WordPress plugin vulnerability, and more