in Security
4 Million WordPress Sites affected by Stored Cross-Site Scripting Vulnerability in LiteSpeed Cache Plugin
On August 14, 2023, our Wordfence Threat Intelligence team identified and began the responsible disclosure[…]
vulnerability
Latest posts
- in Security
ACF Plugin’s Reflected XSS Vulnerability Attracts Exploit Attempts Within 24 Hours of Public Announcement
On May 5, Patchstack published a security advisory about a high severity reflected cross-site scripting[…]
- in Security
Wordfence Launches Free Vulnerability Database For Commercial Use
Today we are incredibly excited to announce that Wordfence is launching an entirely free vulnerability[…]
- in Security
PSA: Critical Vulnerability Patched in Ninja Forms WordPress Plugin
On June 16, 2022, the Wordfence Threat Intelligence team noticed a back-ported security update in[…]
- in Security
PHP Object Injection Vulnerability in Booking Calendar Plugin
On April 18, 2022, the Wordfence Threat Intelligence team initiated the responsible disclosure process for[…]
- in Security
Elementor 3.6.3 Patches Critical Remote Code Execution Vulnerability
Elementor has patched a critical Remote Code Execution vulnerability that was discovered by threat analyst[…]
- in Security
Critical Authentication Bypass Vulnerability Patched in SiteGround Security Plugin
On March 10, 2022 the Wordfence Threat Intelligence team initiated the responsible disclosure process for[…]
- in Security
ACF 5.12.1 Patches Missing Authorization Vulnerability
Advanced Custom Fields (ACF) recently patched a missing authorization vulnerability in version 5.12.1 that potentially[…]
- in Security
Reflected Cross-Site Scripting Vulnerability Patched in WordPress Profile Builder Plugin
On January 4, 2022 the Wordfence Threat Intelligence team initiated the responsible disclosure process for[…]
- in Security
UpdraftPlus 1.22.3 Patches Severe Vulnerability Through Forced Security Update from WordPress.org
UpdraftPlus, a plugin that allows users to backup to various cloud providers, has patched a[…]
- in Security
84,000 WordPress Sites Affected by Three Plugins With The Same Vulnerability
On November 5, 2021 the Wordfence Threat Intelligence team initiated the responsible disclosure process for[…]
- in Security
XSS Vulnerability in NextScripts: Social Networks Auto-Poster Plugin Impacts 100,000 Sites
Note: To receive disclosures like this in your inbox the moment they’re published, you can[…]
- in Security, WooCommerce
Critical Authentication Bypass Vulnerability Patched in Booster for WooCommerce
On July 30, 2021 the Wordfence Threat Intelligence team initiated the responsible disclosure process for[…]
- in Security
Severe Vulnerability Patched In WooCommerce Currency Switcher
We just patched a severe vulnerability in the WooCommerce Currency Switcher plugin. If you are[…]
- in Security
High Severity Vulnerability Patched in WooCommerce Stock Manager Plugin
On May 21, 2021, the Wordfence Threat Intelligence team initiated the responsible disclosure process for[…]
- in Security
SQL Injection Vulnerability Patched in CleanTalk AntiSpam Plugin
The SQL injection flaw in the Cleantalk plugin could have allowed unauthenticated attackers to extract[…]
- in Security
Critical Vulnerability Patched in WooCommerce Upload Files
A 0-day file upload vulnerability in a premium add-on for WooCommerce allowed Remote Code Execution[…]
- in Security
Medium Severity Vulnerability Patched in User Profile Picture Plugin
On February 15, 2021, our Threat Intelligence team initiated the responsible disclosure process for a[…]
- in Security
Uncovering Potential Issues with the Contact Form 7 Vulnerability: More Data Needed
On December 17, 2020, the Astra research security team disclosed that they had discovered a[…]
- in Security
The Dangers of Using Abandoned Plugins & Themes
It’s not very often that we see abandoned components being used on a website —[…]
