XSS

featured article

Business Roundup Week Ending March 10

Photo of author
Mike Demopoulos
Google Optimize Sunsetting Google recently announced it would shut down its Optimize and Optimize 360 services. These tools were designed to help website owners optimize their content and user experience through A/B testing and personalization features. The decision to shut…
Latest articles

Call a Vulnerability a Vulnerability Roger…

Photo of author
Dan Knauss
Call a Vulnerability a Vulnerability Roger Montii reporting for SEJ looks at an Authenticated Stored XSS vulnerability in the WPBakery Page Builder plugin. The vulnerability was discovered by Wordfence and fixed through their collaboration with WPBakery in a recent update.…

There’s a Stored XSS vulnerability affecting…

Photo of author
Brian Krogsgard

There's a Stored XSS vulnerability affecting the bbPress plugin. This bug is present on every default install of bbPress < 2.5.9, so chances are you might be effect if you have the plugin installed anywhere. Sucuri has more info on…

WordPress security release, and 4.5 development kicks off

Photo of author
Brian Krogsgard
It was the first truly busy day in WordPress core land since the release of WordPress 4.4. Two big things happened: A maintenance and security update was released in WordPress 4.4.1, and the security component affected all versions back that can…

WordFence — a security plugin to…

Photo of author
WordFence -- a security plugin to boot -- has an XSS vulnerability that was recently patched. VaultPress posted more about it, but if you run this plugin, you need to update.

Sucuri has a really in-depth walkthrough…

Photo of author

Sucuri has a really in-depth walkthrough of the Akismet XSS vulnerability they discovered, and it's a nasty 9/10 on their DREAD score. That basically means it's easy to do, and can result in a very bad outcome. Fortunately, auto-updates and…

Akismet getting auto-updated for critical XSS bug

Photo of author
Brian Krogsgard

Akismet has a critical XSS bug that dates back quite some time. A researcher from Sucuri notified us of an XSS vulnerability in the Akismet WordPress plugin. This bug affects all versions of the Akismet WordPress plugin since 2.5.0, but…

Visual Composer has had some updates…

Photo of author

Visual Composer has had some updates to fix several XSS vulnerabilities. This plugin is on millions of websites, either by itself or baked into themes. Envato has an update on how they're handling it, but many of you probably already…
A2 Hosting
WordPress.com