NinTechNet changelog.
July 05, 2020 NinjaFirewall (WP+/WP) v4.2.2 WP+ Edition (Premium): NinjaFirewall can now scan ZIP archives. If you have enabled the “Allow uploads, but block dangerous files”…
Search Results for: csrf
WordPress Brizy Page Builder plugin fixed critical vulnerabilities.
The WordPress Brizy Page Builder plugin (60,000+ active installations) fixed a broken access control vulnerability affecting version 1.0.125 and below that could allow any authenticated user to gain full access to the editor.
WordPress Plugins and Themes Vulnerabilities: Stats, Facts and Recommendations.
For the past six months, we have reported quite a lot of vulnerabilities we discovered in WordPress themes and plugins. Here are some interesting stats and facts about them, as well as a few recommendations for developers.
Multiple vulnerabilities in WordPress IgniteUp/Coming Soon and Maintenance Mode plugin.
The WordPress IgniteUp/Coming Soon and Maintenance Mode plugin, which has 30,000+ active installations, was prone to multiple vulnerabilities in version 3.4 and below that could lead to arbitrary file deletion, stored XSS, information disclosure, HTML injection in email and CSRF, among a few other issues.
Multiple WordPress plugins vulnerable to HTML injection.
Multiple plugins offering to convert WordPress’ default plain text emails to HTML format were found to be vulnerable to HTML injection, which could lead to phishing or CSRF attacks.