in Security
Multiple Vulnerabilities Affecting Multiple MainWP Extensions
Introduction At Patchstack we accept vulnerability reports from individual researchers but also do our own[…]
vulnerabilities
Latest posts
- in Security
Severe Vulnerabilities Fixed in All In One SEO Plugin Version 4.1.5.3
During an internal audit of the All In One SEO plugin, we uncovered an SQL[…]
- in Security
1,000,000 Sites Affected by OptinMonster Vulnerabilities
Note: To receive disclosures like this in your inbox the moment they’re published, you can[…]
- in Security
Multiple vulnerabilities in WP Fastest Cache plugin
We uncovered multiple vulnerabilities in WP Fastest Cache plugin that could grant attackers access to[…]
Using the WPScan plugin to find vulnerabilities in your WordPress website
Looking after the security of your WordPress website involves a lot of different tasks. One[…]
- in Security
WPScan Intro: How to Scan for WordPress Vulnerabilities
In this post, we look at how to use WPScan. The tool provides you a[…]
- in Security
Two Vulnerabilities Patched in Facebook for WordPress Plugin
On December 22, 2020, our Threat Intelligence team responsibly disclosed a vulnerability in Facebook for[…]
- in Security
Vulnerabilities Found in Patreon WordPress plugin
During an internal audit of the Patreon plugin for WordPress, the Jetpack Scan team found[…]
- in Security
Several Vulnerabilities Patched in Tutor LMS Plugin
On December 15, 2020, our Threat Intelligence team responsibly disclosed several vulnerabilities in Tutor LMS,[…]
- in Security
Elementor Patches XSS Vulnerabilities Affecting 7 Million WordPress Sites
Elementor users who haven’t updated recently will want to get on the latest version 3.1.4[…]
- in Security
Multiple Vulnerabilities Patched in Responsive Menu Plugin
On December 17, 2020, our Threat Intelligence team responsibly disclosed three vulnerabilities in Responsive Menu,[…]
- in Security
One Million Sites Affected: Four Severe Vulnerabilities Patched in Ninja Forms
On January 20, 2021, our Threat Intelligence team responsibly disclosed four vulnerabilities in Ninja Forms,[…]
- in Security
Severe Vulnerabilities Patched in NextGen Gallery Affect over 800,000 WordPress Sites
CSRF Vulnerabilities in NextGen Gallery allowed File Uploads, Stored Cross-Site Scripting, and Remote Code Execution
- in Security
Multiple Vulnerabilities Patched in Orbit Fox by ThemeIsle Plugin
On November 19, 2020, our Threat Intelligence team responsibly disclosed two vulnerabilities in Orbit Fox[…]
- in Security
Critical Privilege Escalation Vulnerabilities Affect 100K Sites Using Ultimate Member Plugin
On October 23, 2020, our Threat Intelligence team responsibly disclosed several vulnerabilities in Ultimate Member,[…]
- in Security
High Severity Vulnerabilities in Post Grid and Team Showcase Plugins
We initially reached out to the plugin’s developer, PickPlugins, on September 16, 2020 and provided[…]
- in Security
Critical Vulnerabilities Patched in XCloner Backup and Restore Plugin
On August 14, our Threat Intelligence team discovered several vulnerabilities present in XCloner Backup and[…]
- in Security
High-Severity Vulnerabilities Patched in Discount Rules for WooCommerce
On August 20, 2020, the Wordfence Threat Intelligence team was made aware of several vulnerabilities[…]
- in Security
Newsletter Plugin Vulnerabilities Affect Over 300,000 Sites
On July 13, 2020, our Threat Intelligence team was alerted to a recently patched vulnerability[…]
- in Security
Pirated WordPress Plugins Bundled with Backdoors
One widespread belief among webmasters is that attackers typically only compromise websites in a couple[…]
