Multiple vulnerabilities fixed in CMP – Coming Soon and Maintenance plugin.
The WordPress CMP – Coming Soon and Maintenance plugin (100k+ active installations) fixed multiple vulnerabilities.
High severity vulnerability fixed in Product Input Fields for WooCommerce.
The Product Input Fields for WooCommerce plugin (5,000+ active installations) fixed a high severity vulnerability that could allow an unauthenticated user to download any file from the blog, including the WordPress configuration file.
Critical vulnerability in Adning Advertising plugin actively exploited in the wild.
A critical vulnerability in the WordPress Adning Advertising plugin (8k+ installations) is currently actively exploited in the wild.
Multiple vulnerabilities fixed in Security and Malware Scan by CleanTalk plugin.
The Security and Malware Scan by CleanTalk plugin for WordPress (5,000+ active installations) fixed a vulnerability affecting version 2.50 and below that could allow any authenticated user to interact with all its AJAX actions.
WordPress KingComposer Page Builder fixed multiple critical vulnerabilities.
The WordPress KingComposer Page Builder plugin (100,000+ active installations), fixed multiple critical vulnerabilities affecting version 2.9.2 and below that could lead to authenticated WordPress options change, content injection, stored XSS, arbitrary file deletion and remote code execution among other issues.