Collaborate Disseminate
An ongoing malvertising campaign is exploiting WordPress plugin vulnerabilities to redirect website visitors to malicious pages. Continue reading WordPress Plugin Flaws Exploited in Ongoing Malvertising Campaign
Researchers at Plugin Vulnerabilities cite grudge and irresponsibly disclose bugs in two WordPress plugins from Facebook. Continue reading Irked Researcher Discloses Facebook WordPress Plugin Flaws
Security researchers have been warning about a critical vulnerability they discovered in one of a popular WordPress Live Chat plugin, which, if exploited, could allow unauthorized remote attackers to steal chat logs or manipulate chat sessions.
The vu… Continue reading New Flaw in WordPress Live Chat Plugin Lets Hackers Steal and Hijack Sessions
Researchers are warning of flaws in two WordPress plugins – Slick Popup and WP Database Backup – including one that remains unpatched. Continue reading WordPress Plugin Has Unpatched Privilege Escalation Flaw, Warn Researchers
Researchers have uncovered another serious bug in WP Live Chat that could lead to the mass compromise of websites. Continue reading WordPress plugin sees second serious security bug in six weeks
A cross-site scripting flaw in a popular WordPress plugin enables an unauthenticated attacker to insert JavaScript payloads into impacted websites. Continue reading WordPress WP Live Chat Support Plugin Fixes XSS Flaw
After researchers were able to bypass a file upload validation flaw patch in WP Live Chat, a new patch has been issued. Continue reading WP Live Chat WordPress Plugin Re-Patches File Upload Flaw
Yet another WordPress plugin vulnerability has put thousands of websites at risk. Continue reading Users Urged to Disable WordPress Plugin After Unpatched Flaw Disclosed
Yet another Wordpress plugin, Yellow Pencil Visual Theme Customizer, is being exploited in the wild after two software vulnerabilities were discovered. Continue reading WordPress Yellow Pencil Plugin Flaws Actively Exploited
A vulnerability in the Yuzo Related Posts WordPress plugin, used by 60,000 websites, is being exploited in the wild. Continue reading WordPress Urges Users to Uninstall Yuzo Plugin After Flaw Exploited