Switch to the dark mode that's kinder on your eyes at night time.

Switch to the light mode that's kinder on your eyes at day time.

Switch to the dark mode that's kinder on your eyes at night time.

Switch to the light mode that's kinder on your eyes at day time.

WordPress Plugin WP Statistics: Unauthenticated Stored XSS Under Certain Configurations (blog.sucuri.net)

by WPNEWS team July 20, 2019, 22:20

The WordPress plugin WP Statistics, which has an active installation base of 500k users, has an unauthenticated stored XSS vulnerability on versions prior to 12.6.7.

This vulnerability can only be exploited under certain configurations—the default settings are not vulnerable.

security XSS

More From: Security

How to Find & Fix Japanese SEO Spam (blog.sucuri.net)
Japanese SEO Spam, also known as “Japanese keyword hack” or “Japanese SEO poisoning,” is a spammy search engine optimization technique used by black hat SEO artists to make a website[…]
The WordPress “Zombie” Plugins Pandemic Affects 1.6M+ Websites (patchstack.com)
The WordPress ecosystem is getting better with addressing security issues, but there is one big bottleneck – unreachable plugin developers.
2023 WordPress Security Survey – What we have learned (melapress.com)
Melapress presents the results and findings of its WordPress Security Survey 2023 edition held online, and in-person at WCEU.
All-In-One Security Plugin Patches Sensitive Data Exposure Vulnerability in Version 5.2.0 (wptavern.com)
All-In-One Security (AIOS), a plugin active on more than a million WordPress sites, was found to be logging plaintext passwords from login attempts in the database and has patched the[…]
Vulnerability patched in several WooCommerce Extensions for payment processing (developer.woocommerce.com)
On April 16, 2023, a vulnerability was discovered in the WooCommerce Stripe extension. Once the issue was reported, our team prioritized fixing affected versions. While addressing the issue, we identified[…]
#79 – Robert Abela on How to Keep Your WordPress Website Secure (wptavern.com)
On the podcast today we have Robert Abela. Robert is the CEO and founder of MelaPress, formerly known as WP White Security. They make niche WordPress security and admin plugins.[…]

WordPress Plugin WP Statistics: Unauthenticated Stored XSS Under Certain Configurations (blog.sucuri.net)

Leave a ReplyCancel reply

Loginizer Plugin Gets Forced Security Update for Vulnerabilities Affecting 1 Million Users (wptavern.com)

Vulnerability Exposes Over 4 Million Sites Using WPBakery (www.wordfence.com)

How to Find & Fix Japanese SEO Spam (blog.sucuri.net)

The WordPress “Zombie” Plugins Pandemic Affects 1.6M+ Websites (patchstack.com)

2023 WordPress Security Survey – What we have learned (melapress.com)

All-In-One Security Plugin Patches Sensitive Data Exposure Vulnerability in Version 5.2.0 (wptavern.com)

Vulnerability patched in several WooCommerce Extensions for payment processing (developer.woocommerce.com)

#79 – Robert Abela on How to Keep Your WordPress Website Secure (wptavern.com)

WP Media Folder Review: Organise Your WordPress Media Library (www.wpeka.com)

Experimental Block Areas Plugin Allows for Editing Content Sitewide with Gutenberg (wptavern.com)

Leave a ReplyCancel reply

Log In

Sign In

Forgot password?

Your password reset link appears to be invalid or expired.

Log in

Privacy Policy

Add to Collection

No Collections