WordPress Advanced Shipment Tracking for WooCommerce fixed critical vulnerability.

The WordPress Advanced Shipment Tracking for WooCommerce (50,000+ active installations) fixed a critical vulnerability affection version 3.2.4.1 and below.

Posted on July 1, 2021 - 1:17pm [+0700]
NinjaFirewall

WordPress PWA for WP and AMP plugin fixed vulnerabilities.

The WordPress PWA for WP and AMP plugin (20,000+ active installations) fixed a critical broken access control vulnerability affecting version 1.7.32 and below that could lead to arbitrary file upload and remote code execution.

Posted on June 18, 2021 - 12:46pm [+0700]
NinjaFirewall

Broken access control vulnerability fixed in WordPress 404 to 301 plugin.

The WordPress 404 to 301 plugin (100,000+ active installations), fixed a broken access control vulnerability affecting version 3.0.7 and below.

Posted on June 4, 2021 - 1:08pm [+0700]
NinjaFirewall

WordPress Kiwi Social Sharing plugin fixed critical vulnerability.

The WordPress Kiwi Social Sharing plugin fixed a critical vulnerability affecting version 2.1.0 that could allow unauthenticated users to modify WordPress options in the database and take over the website.

Posted on March 16, 2021 - 11:18pm [+0700]
NinjaFirewall

Zero-day vulnerability fixed in WordPress Flo Forms plugin.

The WordPress Flo Forms plugin (10,000+ installations) fixed a critical zero-day vulnerability affecting version 1.0.35 and below that could allow the attacker to take over the website and its database.