Forced Update

Open Secrets: Forced Updates in WordPress

Dan Knauss

July 1, 2022

FeaturesMake WordPress

Two weeks ago, Robert Rowley did a detailed post-mortem analysis for Patchstack of a severe vulnerability in Ninja Forms. Chloe Chamberland at Wordfence had identified and also described it in detail the day before. Both Robert, Chloe, and Sarah Gooding…

Coordinated plugin updates to address security vulnerability in many popular WordPress plugins

Brian Krogsgard

April 20, 2015

PlanetSecurity

The common vulnerability that triggered a coordinated plugin update of many popular plugins this morning is caused by a lack of escaping of two WordPress functions, add_query_arg() and remove_query_arg(). It appears it was a common misunderstanding that the functions needed…

Open Secrets: Forced Updates in WordPress

Coordinated plugin updates to address security vulnerability in many popular WordPress plugins

Post Status

Opportunities

The Directory

Resources