WP Security: 1 premium theme vulnerability in May 2018

For your WP Security, be informed about the latest vulnerabilities in WordPress plugins: Redirection Authenticated Local File Inclusion reported by Ryan (Dewhurst Security). ACE via file inclusion in Redirection allows admins to execute any PHP file in the filesystem. If you are logged in as an administrator on any site…

For your WP Security, be informed about the latest vulnerabilities in WordPress themes: Supreme Directory Theme Unauthenticated Cross-Site Scripting (XSS) reported by Franciny Salles and Flavio Landivar. This theme has a parameter’s, that allows executing an xss payload: “script>alert(0)”. The software does not neutralize or incorrectly neutralizes user-controllable input before…

TOP 3 always ignored WordPress protection Everybody wants what is best for them, there are no exceptions. When we’re doing on-demand cleaning services, like malware CLEANUP or undo DISASTERS (infection/hack removal); we often hired to do also a Security AUDIT to find out how this happened and do the necessary…

What could go wrong SECURITY wise? Security wise, this gets ugly fast and it’s painful. When your security is breached you lose immediately what you had. You lose files, data, sensitive and internal information. From the public view, your reputation gets a hit, your natural ranking is penalized, your customers…

WP Security bulletin – March 2019 At your next scheduled WordPress Maintenance, be advised for your WP Security about the latest 21 vulnerabilities in WordPress plugins identified and reported publicly. As these vulnerabilities are disclosed, when you use one (or more) of these outdated plugins – your risking serious WordPress…

For your WP Security, be informed about the latest vulnerabilities in WordPress plugins: WP Mailster Cross-Site Scripting (XSS) reported by Dewhurst Security. The WP Mailster plugin before 1.5.5 for WordPress has XSS in the unsubscribe handler via the mes parameter to view/subscription/unsubscribe2.php. immediately update to version 1.5.5 to fix vulnerability…

With so many bad news of vulnerabilities and hackers attempting to compromise WordPress sites regularly, you start wondering if WordPress is really secure at all. You can stop wondering because WordPress is secure! The popularity numbers create this negative effect. Today, WordPress powers 27% of all sites on the web…