WordPress latest security fixes.
The latest security fixes in WordPress themes and plugins.
Search Results for: csrf
HTML injection vulnerability in WordPress CformsII plugin.
The WordPress CformsII plugin (10,000+ active installations) was prone to an HTML injection vulnerability that could be used to target the administrator.
NinTechNet changelog.
August 11, 2019 NinjaFirewall (WP+/WP) v4.0.2 Added a new policy to enable the “SameSite” flag on cookies in order to protect against cross-site request forgery (CSRF)…
Multiple vulnerabilities in WordPress Woody Ad Snippets plugin lead to remote code execution.
A unauthenticated options import vulnerability combined with a stored XSS vulnerability can lead to remote code execution in the WordPress “Woody Ad Snippets” plugin (90,000+ active installations), allowing hackers to compromise the website and its database.
Privilege escalation vulnerability in WordPress ND Shortcodes For Visual Composer plugin.
The WordPress ND Shortcodes For Visual Composer plugin (10,000+ active installations), was prone to a critical privilege escalation vulnerability.
HTML injection vulnerability in WordPress Pirate Forms plugin.
The WordPress Pirate Forms plugin (200,000+ active installations) was prone to an HTML injection vulnerability that could be used to target the administrator.
Unauthenticated Stored XSS in WordPress Coming Soon Page and Maintenance Mode plugin.
The WordPress Coming Soon Page and Maintenance Mode (7,000+ active installations), was prone to unauthenticated stored XSS and settings reset vulnerabilities in version 1.7.8 and below.
Settings change and CSS injection in WordPress Ocean Extra plugin.
The WordPress Ocean Extra plugin, which has over 400,000 active installations, was prone to settings change and CSS injection vulnerabilities in version 1.5.8 and below.
Securing WordPress with a Web Application Firewall: NinjaFirewall (WP Edition).
In this article we will see how to provide a very high level of protection to a WordPress blog with a web application firewall.