WordPress GDPR Cookie Consent plugin fixed vulnerability.

The WordPress GDPR Cookie Consent plugin, which has 700,000+ active installations, fixed a vulnerability affecting version 1.8.2 and below that could lead to authenticated stored XSS and privilege escalation.

Posted on January 27, 2020 - 10:34am [+0700]
NinjaFirewall

WordPress WPS Hide Login fixed security issue.

The WordPress WPS Hide Login plugin (500,000 active installations) fixed a vulnerability in version 1.5.4.2 and below that could allow an attacker to bypass its security and access the secret login page.

Posted on January 20, 2020 - 4:08pm [+0700]
NinjaFirewall

WordPress 2J SlideShow plugin fixed authenticated arbitrary plugin deactivation vulnerability.

The WordPress 2J SlideShow plugin, which has 3,000+ active installations, fixed an authenticated arbitrary plugin deactivation vulnerability affecting version 1.3.31 and below.

WordPress Ape Gallery plugin fixed authenticated arbitrary plugin deactivation vulnerability.

The WordPress Ape Gallery plugin, which has 6,000+ active installations, fixed an authenticated arbitrary plugin deactivation vulnerability affecting version 2.0.6 and below.

WordPress GDPR Cookie Compliance plugin fixed authenticated settings deletion vulnerability.

The WordPress GDPR Cookie Compliance plugin, which has 90,000+ active installations, fixed an authenticated settings deletion vulnerability affecting version 4.0.2 and below.