Stay up to date with WordPress Security

<

UpdraftPlus Faces Backlash Over Google Drive API Permissions

July 15, 2023

The UpdraftPlus plugin, widely used for WordPress site backups, has recently come under fire due to concerns over its Google Drive API

Read more

Addressing High Severity SSRF Vulnerability in the WordPress Spectra Plugin

July 14, 2023

As WordPress website owners, safeguarding your site against potential threats is of utmost importance. Prioritizing WordPress security and proactively managing plugin vulnerabilities

Read more

HT Mega Plugin Privilege Escalation Vulnerability

July 14, 2023

A critical vulnerability has been identified in the WordPress HT Mega plugin. This vulnerability could allow a malicious actor to escalate their

Read more

Addressing High-Severity XSS Vulnerability in WordPress Authors List Plugin

July 13, 2023

A critical Cross-Site Scripting (XSS) vulnerability has been identified in the WordPress Authors List plugin, posing significant risks to WordPress security and

Read more

Critical Cross-Site Scripting (XSS) Vulnerability in WordPress WPFunnels Plugin

July 13, 2023

A critical Cross-Site Scripting (XSS) vulnerability has been discovered in the WordPress Drag & Drop Sales Funnel Builder for WordPress – WPFunnels

Read more

MailArchiver Plugin Severe Vulnerability

July 13, 2023

A critical security vulnerability has been identified in the MailArchiver plugin for WordPress, raising serious concerns over WordPress security and the potential

Read more

Mitigating XSS Vulnerability in WP Mail Log Plugin

July 12, 2023

A critical Cross-Site Scripting (XSS) vulnerability has been uncovered in the WP Mail Log plugin for WordPress. This security flaw enables attackers

Read more

Critical Security Vulnerability in All In One WP Security & Firewall Plugin

July 12, 2023

The All In One WP Security & Firewall Plugin, installed on over one million WordPress sites, recently discovered a security flaw in

Read more

Critical XSS Vulnerability in Variation Swatches for WooCommerce Plugin

July 12, 2023

A critical cross-site scripting (XSS) vulnerability has been discovered in the Variation Swatches for WooCommerce plugin for WordPress. This security flaw allows

Read more

Addressing High-Severity XSS Vulnerability in Variation Images Gallery for WooCommerce Plugin

July 12, 2023

A high-severity Cross-Site Scripting (XSS) vulnerability has been identified in the Variation Images Gallery for WooCommerce Plugin, urging WordPress website owners to

Read more

Addressing High-Severity SQL Injection Vulnerability in User Activity Log Plugin

July 12, 2023

A high-severity SQL injection vulnerability has been identified in the WordPress User Activity Log Plugin version 7.6. The discovery and responsible disclosure

Read more

High-Severity XSS Vulnerability in WordPress Twittee Text Tweet Plugin

July 12, 2023

A high-severity Cross-Site Scripting (XSS) vulnerability has been discovered in the WordPress Twittee Text Tweet Plugin version 7.1. This critical flaw was

Read more

Critical XSS vulnerability in Radio Forge Muses Player with Skins Plugin

July 12, 2023

A critical cross-site scripting (XSS) vulnerability has been identified in the Radio Forge Muses Player with Skins Plugin for WordPress. The vulnerability

Read more

Post SMTP Mailer/Email Log Plugin to Address XSS Vulnerability

July 12, 2023

A serious Cross-Site Scripting (XSS) vulnerability has been uncovered in version 7.1 of the WordPress Post SMTP Mailer/Email Log plugin, demanding immediate

Read more

Broken Access Control Vulnerability in WordPress Integrate Google Drive Plugin

July 12, 2023

An alarming Broken Access Control vulnerability has been identified in version 9.8 of the WordPress Integrate Google Drive Plugin, calling for urgent

Read more