XSS Injection Campaign Exploits WordPress AMP Plugin

News broke last week disclosing a number of vulnerabilities in the AMP For WP plugin, installed on over 100,000 WordPress sites. WordPress contributor Sybre Waaijer identified the security issue and confidentially disclosed it to the WordPress plugins team. To exploit the flaw, an attacker needs to have a minimum of subscriber-level access on a vulnerable site. The Read More

Targeting Multiple Vulnerable WordPress Plugins

Ars Kafe

Cross-Site Scripting: The Real WordPress Supervillain

2018: A Year of Cyber Attacks – HACKMAGEDDON

WordPress XSS Attack (Cross Site Scripting) - How To Prevent?

WordPress SQL injection – SQL Attack Prevention GUIDE [2023]

Exploiting XSS - Injecting into Scriptable Contexts - PortSwigger

WordPress XSS Attack (Cross Site Scripting) - How To Prevent?

Cross Site Scripting (XSS) - Payload Generator

WordPress Transposh: Exploiting a Blind SQL Injection via XSS

The impact of an XSS vulnerability on WordPress: How hackers

Alerta de segurança WordPress - Plugin AMP

Vulnerability in AMP for WP Plugin Allowed Admin Access to WordPress