Here is what we have been doing to keep your website secure from WordPress plugin vulnerabilities this week:

Plugin Vulnerabilities We Helped Get Fixed This Week

• Persistent cross-site scripting (XSS) vulnerability in Total Security, discovered by us
• Settings change vulnerability in Total Security, discovered by us

  [Read more]

Here is what we have been doing to keep your website secure from WordPress plugin vulnerabilities this week:

Plugin Vulnerabilities We Discovered and Publicly Disclosed This Week

• Arbitrary file upload vulnerability in Adblock Blocker
• Arbitrary file upload vulnerability in Estatik
• Authenticated information disclosure vulnerability in Simple History

Plugin Vulnerabilities We Helped Get Fixed This Week

• Cross-site request forgery (CSRF)/cross-site scripting (XSS) vulnerability in Booking Calendar, discovered by Edwin Molenaar
• Authenticated information disclosure vulnerability in Simple History, discovered by us
• Remote code execution (RCE) vulnerability in wSecure Lite, discovered by us

  [Read more]

Here is what we have been doing to keep your website secure from WordPress plugin vulnerabilities this week:

Plugin Vulnerabilities We Discovered and Publicly Disclosed This Week

• Arbitrary file upload vulnerability in ecSTATic
• Cross-site request forgery (CSRF) vulnerability in User Activity Log
• Cross-site request forgery (CSRF)/cross-site scripting (XSS) vulnerability in User Activity Log

Plugin Vulnerabilities We Helped Get Fixed This Week

• Reflected cross-site (XSS) vulnerability in Realia, discovered by WICS

  [Read more]

Here is what we have been doing to keep your website secure from WordPress plugin vulnerabilities this week:

Plugin Vulnerabilities We Discovered and Publicly Disclosed This Week

• Option update vulnerability in Form Lightbox
• Persistent cross-site scripting (XSS) vulnerability in Total Security
• Settings change vulnerability in Total Security
• Authenticated persistent cross-site scripting (XSS) vulnerability in User Login Log

Plugin Vulnerabilities We Helped Get Fixed This Week

• Arbitrary directory download vulnerability in Download Plugin, discovered by us
• Arbitrary directory download vulnerability in Download Theme, discovered by us

  [Read more]

Here is what we have been doing to keep your website secure from WordPress plugin vulnerabilities this week:

Plugin Vulnerabilities We Discovered and Publicly Disclosed This Week

• Remote code execution (RCE) vulnerability in wSecure Lite
• Arbitrary directory download vulnerability in Download Plugin
• Arbitrary directory download vulnerability in Download Theme
• Local file inclusion (LFI) vulnerability in MailPress
• Capabilities change vulnerability in MailPress

Plugin Vulnerabilities We Helped Get Fixed This Week

• Privilege escalation vulnerability in Simplr Registration Form Plus+

  [Read more]

Here is what we have been doing to keep your website secure from WordPress plugin vulnerabilities this week:

Plugin Vulnerabilities We Discovered and Publicly Disclosed This Week

• Authenticated information disclosure vulnerability in Email Log
• Authenticated information disclosure vulnerability in Log Emails
• Arbitrary file upload vulnerability in Advanced AJAX Page Loader
• Authenticated information disclosure in Activity Log
• Authenticated persistent cross-site scripting (XSS) vulnerability in WooCommerce Products Filter
• Arbitrary file upload vulnerability in WooCommerce Products Filter

Plugin Vulnerabilities We Helped Get Fixed This Week

• Arbitrary file upload vulnerability in Jssor Slider, discovered by us
• Authenticated information disclosure vulnerability in Email Log, discovered by us
• Authenticated information disclosure vulnerability in Log Emails, discovered by us
• Arbitrary file upload vulnerability in Advanced AJAX Page Loader, discovered by us
• Arbitrary file upload vulnerability in BePro Listings, discovered by us
• Authenticated information disclosure in Activity Log, discovered by us
• Post deletion vulnerability in BePro Listings, discovered by us
• Authenticated persistent cross-site scripting (XSS) vulnerability in WooCommerce Products Filter, discovered by us
• Arbitrary file upload vulnerability in WooCommerce Products Filter, discovered by us

  [Read more]

Here is what we have been doing to keep your website secure from WordPress plugin vulnerabilities this week:

Plugin Vulnerabilities We Discovered and Publicly Disclosed This Week

• Authenticated arbitrary file upload vulnerability in WordPress Download Manager
• Reflected cross-site scripting (XSS) vulnerability in WP Security Audit Log
• Authenticated option deletion vulnerability in Social Media and Share Icons (Ultimate Social Media)
• Authenticated option deletion vulnerability in Social Media
• Authenticated persistent cross-site scripting (XSS) vulnerability in Cherry Plugin

Plugin Vulnerabilities We Helped Get Fixed This Week

• Reflected cross-site scripting (XSS) vulnerability in WP Security Audit Log, discovered by us
• Authenticated option deletion vulnerability in Social Media and Share Icons (Ultimate Social Media), discovered by us
• Authenticated option deletion vulnerability in Social Media, discovered by us

  [Read more]

Here is what we have been doing to keep your website secure from WordPress plugin vulnerabilities this week:

Plugin Vulnerabilities We Discovered and Publicly Disclosed This Week

• Cross-site request forgery (CSRF) vulnerability in wpDiscuz
• Cross-site request forgery (CSRF)/ cross-site scripting (XSS) vulnerability in WP Fastest Cache
• Privilege escalation vulnerability in Simplr Registration Form Plus+
• Cross-site request forgery (CSRF)/ cross-site scripting (XSS) vulnerability in WP Mobile Detector
• Persistent cross-site scripting (XSS) vulnerability in WordPress File Monitor
• Arbitrary file upload vulnerability in Jssor Slider

Plugin Vulnerabilities We Helped Get Fixed This Week

• Reflected cross-site scripting (XSS) vulnerability in Forget About Shortcode Buttons, discovered by Larry W. Cashdollar
• Cross-site request forgery (CSRF)/ cross-site scripting (XSS) vulnerability in WP Fastest Cache, discovered by us
• Information disclosure vulnerability in Yoast SEO, discovered by us
• Cross-site Request Forgery (CSRF) Vulnerability in Yoast SEO, discovered by us

  [Read more]

Here is what we have been doing to keep your website secure from WordPress plugin vulnerabilities this week:

Plugin Vulnerabilities We Discovered and Publicly Disclosed This Week

• Cross-site request forgery (CSRF) vulnerability in WP to Twitter
• Arbitrary file upload vulnerability in XData Toolkit
• Cross-site request forgery (CSRF) vulnerability in WooCommerce Upload My File

Plugin Vulnerabilities We Helped Get Fixed This Week

• Cross-site request forgery (CSRF) vulnerability in WP to Twitter, discovered by us
• Cross-site request forgery (CSRF) vulnerability in WooCommerce Upload My File, discovered by us

  [Read more]

Here is what we have been doing to keep your website secure from WordPress plugin vulnerabilities this week:

Plugin Vulnerabilities We Discovered and Publicly Disclosed This Week

• Arbitrary file upload vulnerability in Vertical SlideShow
• Arbitrary file upload vulnerability in wp superb Slideshow
• Arbitrary file upload vulnerability in wp Dreamwork Gallery
• Arbitrary file upload vulnerability in Bliss Gallery
• Arbitrary file upload vulnerability in Image News slider
• Arbitrary file upload vulnerability in YAS Slideshow
• Arbitrary file upload vulnerability in Carousel slideshow
• Arbitrary file upload vulnerability in Levo Slideshow
• Arbitrary file upload vulnerability in Power Zoomer
• Arbitrary file upload vulnerability in Homepage SlideShow
• Arbitrary file upload vulnerability in Smart Slideshow
• Arbitrary file upload vulnerability in Slideshow Pro
• Arbitrary file upload vulnerability in Blaze Slideshow
• Arbitrary file upload vulnerability in Catpro Gallery
• Persistent cross-site scripting (XSS) vulnerability in Flip Slideshow
• Persistent cross-site scripting (XSS) vulnerability in Royal Gallery

  [Read more]