WordPress WPLMS and VibeBP Vulnerabilities

Two widely-used WordPress plugins, WPLMS and VibeBP, have recently been discovered with critical vulnerabilities. These vulnerabilities, if left unaddressed, could potentially expose websites to severe security risks. This analysis provides a comprehensive overview of these vulnerabilities, their impacts, and the necessary mitigations to ensure a secure digital environment. Arbitrary File Uploads (CVE-2024-56054): Privilege Escalation (CVE-2024-56043): […]

CVE-2025-24989 added to CISA KEV

thecyberthrone.in - 22/Feb 16:28

CVE-2025-24989 is a high security vulnerability that has been added to the Known Exploited Vulnerabilities (KEV) Catalog by the Cybersecurity and...

Microsoft fixed actively exploited flaw in Power Pages

securityaffairs.co - 20/Feb 11:20

Microsoft addressed a privilege escalation vulnerability in Power Pages, the flaw is actively exploited in attacks. Microsoft has addressed two...

Microsoft Patches Actively Exploited Power Pages Privilege Escalation Vulnerability

itsecuritynews.info - 20/Feb 05:31

Microsoft has released security updates to address two Critical-rated flaws impacting Bing and Power Pages, including one that has come under active...

Atlassian’s Security Advisory Addresses Multiple Vulnerabilities

thecyberthrone.in - 21/Feb 02:15

In February 2025, Atlassian released a comprehensive security advisory addressing 12 critical and high-severity vulnerabilities across its suite of...

CVE-2025-20111 impacts Cisco Nexus

thecyberthrone.in - 03/Mar 15:10

CVE-2025-20111 is a high-severity vulnerability identified in the health monitoring diagnostics of Cisco Nexus 3000 Series Switches and Cisco Nexus...

CVE-2025-23363 impacts Siemens TeamCenter

thecyberthrone.in - 02/Mar 11:28

CVE-2025-23363 is a high-severity vulnerability identified in Siemens Teamcenter, a product lifecycle management (PLM) software suite used by...

Symantec Diagnostic Tool Flaw Enables Unauthorized Privilege Escalation

itsecuritynews.info - 20/Feb 08:11

Symantec, a division of Broadcom, has released a critical security update to address a high-severity vulnerability identified in its Symantec...

Chrome 134 Released with Several Bug fixes

thecyberthrone.in - 05/Mar 12:56

Google has released Chrome 134 to the stable channel, addressing 14 security vulnerabilities across its core components. These fixes include...

Critical Vulnerability in Fluent Bit Exposes Cloud Services to Potential Cyber Attacks

itsecuritynews.info - 21/Feb 14:11

A critical security flaw in Fluent Bit, a widely adopted log processing and metrics collection tool part of the Cloud Native Computing Foundation...

Paragon Partition Manager Vulnerabilities Let Attackers Escalate Privilege & Trigger DoS Attacks

itsecuritynews.info - 03/Mar 21:04

Five critical memory vulnerabilities in Paragon Partition Manager’s BioNTdrv.sys driver have been discovered, allowing attackers to escalate...

Rubriques :