Switch to the dark mode that's kinder on your eyes at night time.

Switch to the light mode that's kinder on your eyes at day time.

Switch to the dark mode that's kinder on your eyes at night time.

Switch to the light mode that's kinder on your eyes at day time.

Severe Vulnerabilities Patched in Redirection for Contact Form 7 Plugin (www.wordfence.com)

by WPNEWS team April 25, 2021, 11:30 Comments

On February 11, 2021, our Threat Intelligence team responsibly disclosed several vulnerabilities in Redirection for Contact Form 7, a WordPress plugin used by over 200,000 sites. One of these flaws made it possible for unauthenticated attackers to generate arbitrary nonces for any function. The second flaw made it possible for authenticated attackers to install arbitrary …Read More

Contact Form 7

More From: Security

ACF Plugin’s Reflected XSS Vulnerability Attracts Exploit Attempts Within 24 Hours of Public Announcement (wptavern.com)
On May 5, Patchstack published a security advisory about a high severity reflected cross-site scripting (XSS) vulnerability in ACF (Advanced Custom Fields), potentially affecting more than 4.5 mill…
WordPress Server-Side Request Forgery (SSRF) Vulnerability (secure.wphackedhelp.com)
WordPress SSRF Attack In 2021, Microsoft released a security advisory warning of a critical SSRF vulnerability in their Exchange Server software, which was being actively exploited in the wild by[…]
Advanced Custom Fields Plugins Contain Vulnerability, 2+ Million Sites Affected (patchstack.com)
If you’re a Advanced Custom Fields free and pro user, please update the plugin to at least version 6.1.6.Patchstack Pro and Business users are protected from the vulnerability.
Massive Abuse of Abandoned Eval PHP WordPress Plugin (blog.sucuri.net)
Attackers are always finding new and creative ways to compromise websites and maintain their foothold in environments. This is frequently done via the use of backdoors: PHP scripts designed to[…]
WP Engine’s Security Team Creates Custom Workflow with WPScan to Protect Clients (blog.wpscan.com)
How WP Engine automates security for over 1.5 million customer sites with WPScan. The Hero: WP Engine The Problem “We know that there are other options out there, but given[…]
Astro + WPGraphQL for more secure WordPress sites
WordPress powers over 43% of the web, and that makes it a prime target for hackers and bots. But […]

Severe Vulnerabilities Patched in Redirection for Contact Form 7 Plugin (www.wordfence.com)

Leave a Reply Cancel reply

Enable Contact Form 7 to Work with Disable WP REST API (perishablepress.com)

New CF7 Blocks Plugin Brings Blocks to Contact Form 7 (wptavern.com)

ACF Plugin’s Reflected XSS Vulnerability Attracts Exploit Attempts Within 24 Hours of Public Announcement (wptavern.com)

WordPress Server-Side Request Forgery (SSRF) Vulnerability (secure.wphackedhelp.com)

Advanced Custom Fields Plugins Contain Vulnerability, 2+ Million Sites Affected (patchstack.com)

Massive Abuse of Abandoned Eval PHP WordPress Plugin (blog.sucuri.net)

WP Engine’s Security Team Creates Custom Workflow with WPScan to Protect Clients (blog.wpscan.com)

Astro + WPGraphQL for more secure WordPress sites

With Some Hits and Misses, the Guten Blog WordPress Theme Has Potential (wptavern.com)

Themes Set Up for a Paradigm Shift, WordPress 5.8 Will Unleash Tools To Make It Happen (wptavern.com)

Leave a Reply Cancel reply

Log In

Sign In

Forgot password?

Your password reset link appears to be invalid or expired.

Log in

Privacy Policy

Add to Collection

No Collections