There has been a remote code execution (RCE) vulnerability found in WP Super Cache. The plugin affects 2 million+ Hosted WP strongly recommend WordPress users to update to version 1.7.2…
Several vulnerabilities have been found and patched in the Tutor LMS plugin. The first flaw made it possible for authenticated attackers to inject and execute arbitrary SQL statements on WordPress…
Update: As of late March 9th, 2021, the vulnerabilities have been fully patched in version 4.1.7 Yesterday March the 8th 2021, the Hosted WP team became aware of a critical…
In December, the Wordfence team was notified of a possible 0-day vulnerability in the WooCommerce Upload Files Plugin. This add-on has over 5,000 installations. This plugin is a seperate plugin…
On the 15th February 2021, Wordfence discovered a medium threat security vulnerability in the plugin called User Profile Picture. The WordPress Plugin has been installed on over 60,000 sites. The…
