ByBrian Krogsgard
Posted on
There’s a Stored XSS vulnerability affecting the bbPress plugin. This bug is present on every default install of bbPress < 2.5.9, so chances are you might be effect if you have the plugin installed anywhere. Sucuri has more info on their blog.
WordFence — a security plugin to boot — has an XSS vulnerability that was recently patched. VaultPress posted more about it, but if you run this plugin, you need to update.
Welcome to the sixth “Week in Review” on Post Status, where I hope to offer up some of the things you may have missed in the last week or so. Unfortunately, I haven’t posted since the last week in review. Trust me, that’ll change this week. There are already a lot of posts lined up for…
Google Optimize Sunsetting Google recently announced it would shut down its Optimize and Optimize 360 services. These tools were designed to help website owners optimize their content and user experience through A/B testing and personalization features. The decision to shut down these services surprises many in the digital marketing community, as they are widely used…
I’m grumpy today. Clickbait journalism annoys me, and WordPress security related clickbait journalism especially annoys me. Ars Technica, PC World, ZD Net, and TripWire are just a few sites that reported over a million WordPress sites were susceptible to being hacked after a vulnerability was discovered by Sucuri. Except, you know, that it’s not true. The…
Sucuri is seeking to build a full CloudFlare alternative, according to WP Tavern: “The fundamental difference is that it’s security first, performance second,” Perez said. “So yes, in the coming months you’ll see more as our solution blossoms into a full WAF/CDN solution.” Up until now the company has been limited by using a leased…
Some WooThemes customers are alleging that their credit cards suffered from fraudulent charges after purchasing items from WooThemes’ website. The point of vulnerability is unknown at this time. The number of affected customers is unknown. The following is what we know: Just after 3:00 p.m. central time Wednesday, May 7th, WooThemes publicly tweeted struggles with their…
