https://www.pluginvulnerabilities.com/2017/09/22/vulnerability-details-reflected-cross-site-scripting-xss-vulnerability-in-2kb-amazon-affiliates-store/The changelog entry for version 2.1.1 of the plugin 2kb Amazon Affiliates Store is “Security fix, thanks...
https://www.pluginvulnerabilities.com/2017/09/21/vulnerability-details-php-object-injection-vulnerability-in-invite-anyone/From time to time a vulnerability is fixed in a plugin without the discoverer putting out a report on the vulnerability and we will put out a...
9 WordPress Plugins Targeted in Coordinated 4.5-Year Spam Campaign This entry was posted in WordPress Security on September 20, 2017 by Mark Maunder 16 Replies On Tuesday last week we published a post that described how someone had released an...
https://www.pluginvulnerabilities.com/2017/09/20/arbitrary-file-upload-vulnerability-in-all-post-contact-form/Through the proactive monitoring of changes in WordPress plugins for serious vulnerabilities we do, we recently found an an arbitrary file upload...
https://secupress.me/blog/wordpress-4-8-2-security-release/On Sep. 19th 2017 WordPress Core and Security Team has released a minor version containing 9 security fixes and 6 maintenance fixes. This is very important to understand that this is a big security release...