WP Super Cache authenticated remote code execution
There has been a remote code execution (RCE) vulnerability found in WP Super Cache. The plugin affects 2 million+ Hosted WP strongly recommend WordPress users …
Multiple Vulnerabilities Patched in Tutor LMS Plugin
Several vulnerabilities have been found and patched in the Tutor LMS plugin. The first flaw made it possible for authenticated attackers to inject and execute …
Critical 0-day in the Plus addons for Elementor allowing full site take over
Update: As of late March 9th, 2021, the vulnerabilities have been fully patched in version 4.1.7 Yesterday March the 8th 2021, the Hosted WP team …
Critical Vulnerability Found in WooCommerce Upload Files
In December, the Wordfence team was notified of a possible 0-day vulnerability in the WooCommerce Upload Files Plugin. This add-on has over 5,000 installations. This …
Medium security vulnerability fixed in user profile mode plugin
On the 15th February 2021, Wordfence discovered a medium threat security vulnerability in the plugin called User Profile Picture. The WordPress Plugin has been installed …