#1 Middle East & Africa Trusted Cybersecurity News & Magazine |

28 C
Dubai
Tuesday, November 18, 2025
Subscribe
HomeTopics 5Website Security

Website Security

spot_imgspot_imgspot_imgspot_img
AI & Cybersecurity

CVE‑2025‑7847: Arbitrary File Upload in AI Engine Puts 100K+ WordPress Sites at Risk of RCE

On 18 July 2025, researchers at Wordfence disclosed CVE‑2025‑7847, a high-severity (CVSS 8.8) arbitrary file upload vulnerability in the widely used AI Engine WordPress plugin, affecting versions...
Vulnerability Management

Hackers Actively Exploit Critical RCE in WordPress Alone Theme (CVE-2025-5394)

A newly disclosed flaw in the Alone – Charity Multipurpose Non-profit WordPress Theme (versions ≤ 7.8.3) enables unauthenticated attackers to deploy arbitrary plugin ZIP files-containing...
America

U.S. Treasury Sanctions Aeza Group Bulletproof Russian Bulletproof Hosting Provider in Major Cybercrime Crackdown

On 1 July 2025, the U.S. Department of the Treasury’s Office of Foreign Assets Control (OFAC) sanctioned Aeza Group, a Russia‑based bulletproof hosting service, for enabling...
DoS & DDoS

Monster 7.3 Tbps DDoS Attack Blocked by Cloudflare in Historic Mitigation

In mid‑May 2025, Cloudflare successfully deflected the largest DDoS attack ever recorded peaking at 7.3 terabits-per-second targeting a hosting provider using its Magic Transit service,...
Breached

Victoria’s Secret Hit by Security Incident: Website, Email, and Operations Disrupted

On 28 May 2025, Victoria’s Secret & Co. suffered a significant security incident that disrupted its digital infrastructure, including website availability, internal email systems,...
Website Security

Unpatched Zero-Day in TI WooCommerce Wishlist Plugin Exposes Over 100K Sites to RCE Risk

A critical unauthenticated file upload flaw in the TI WooCommerce Wishlist plugin, tracked as CVE-2025-47577, remains unpatched leaving over 100,000 WordPress e-commerce sites exposed...
Website Security

CVE‑2025‑4389: Crawlomatic’s Critical File‑Upload Flaw Opens 12,000+ WordPress Sites to One‑Click RCE

A critical vulnerability tracked as CVE‑2025‑4389 (CVSS 9.8) allows unauthenticated attackers to upload any file type including web‑shells via the crawlomatic_generate_featured_image() hook in Crawlomatic Multipage Scraper Post...
123...5Page 1 of 5

Subscribe

- Never miss a story with notifications

- Gain full access to our premium content

- Browse free from up to 5 devices at once

Must read

spot_imgspot_imgspot_imgspot_img

Cybercory Magazine

Cybercory.com serves as a platform for promoting, motivating, and educating its audience on cybersecurity matters, contributing to a more secure digital environment. Cybercory is a part of Sainttly Group.

Latest

Hackers Breach Multiple Kenyan Government Websites, Temporarily Seize Presidency Portal

Website Security 0
Kenya is investigating a major cybersecurity incident after hackers...

U.S. Cracks Down on North Korea’s Global Cybercrime Network in Sweeping Nationwide Operation

America 0
According to the U.S. Department of Justice, U.S. authorities...

Open Letter to Samsung: A Growing Outcry Over Forced Israeli-Founded Bloatware in the WANA Region

Cloud Security 0
According to a newly published open letter by SMEX...

Popular

Hackers Breach Multiple Kenyan Government Websites, Temporarily Seize Presidency Portal

Website Security 0
Kenya is investigating a major cybersecurity incident after hackers...

U.S. Cracks Down on North Korea’s Global Cybercrime Network in Sweeping Nationwide Operation

America 0
According to the U.S. Department of Justice, U.S. authorities...

Open Letter to Samsung: A Growing Outcry Over Forced Israeli-Founded Bloatware in the WANA Region

Cloud Security 0
According to a newly published open letter by SMEX...

Useful Links

Quick Links

© 2021-2025 cybercory.com, Sainttly Group. All Rights Reserved. Designed by digitalliums.com.