Zero-day vulnerability fixed in WordPress Flexible Checkout Fields for WooCommerce plugin.

The WordPress Flexible Checkout Fields for WooCommerce plugin, which has 20,000+ active installations, fixed a critical zero-day vulnerability affecting version 2.3.1 and below.

Posted on February 12, 2020February 12, 2020
NinjaFirewall

WordPress GDPR Cookie Consent plugin fixed vulnerability.

The WordPress GDPR Cookie Consent plugin, which has 700,000+ active installations, fixed a vulnerability affecting version 1.8.2 and below that could lead to authenticated stored XSS and privilege escalation.

Posted on January 27, 2020
NinjaFirewall

WordPress WPS Hide Login fixed security issue.

The WordPress WPS Hide Login plugin (500,000 active installations) fixed a vulnerability in version 1.5.4.2 and below that could allow an attacker to bypass its security and access the secret login page.

Posted on January 20, 2020
NinjaFirewall

WordPress 2J SlideShow plugin fixed authenticated arbitrary plugin deactivation vulnerability.

The WordPress 2J SlideShow plugin, which has 3,000+ active installations, fixed an authenticated arbitrary plugin deactivation vulnerability affecting version 1.3.31 and below.

Posted on December 30, 2019January 7, 2020
NinjaFirewall

WordPress Ape Gallery plugin fixed authenticated arbitrary plugin deactivation vulnerability.

The WordPress Ape Gallery plugin, which has 6,000+ active installations, fixed an authenticated arbitrary plugin deactivation vulnerability affecting version 2.0.6 and below.