XSS Injection Campaign Exploits WordPress AMP Plugin

News broke last week disclosing a number of vulnerabilities in the AMP For WP plugin, installed on over 100,000 WordPress sites. WordPress contributor Sybre Waaijer identified the security issue and confidentially disclosed it to the WordPress plugins team. To exploit the flaw, an attacker needs to have a minimum of subscriber-level access on a vulnerable site. The Read More

Cybersecurity for startups - enable HTTP security headers

Second WordPress hacking campaign underway, this one targeting AMP

WordPress XSS Attack (Cross Site Scripting) - How To Prevent?

WordPress XSS Attack, Symptoms, Example

The Dark Arts: Cross Site Scripting

WordPress Security Issues & Vulnerabilities List [2023]

WordPress SQL injection – SQL Attack Prevention GUIDE [2023]

WordPress Vulnerability Report — November 29, 2023 - SolidWP

CVE-2021-33851 - Stored Cross-Site Scripting in WordPress

Cross-Site Scripting: The Real WordPress Supervillain