Security Advisories

Author's position will be here

Security Advisories

Latest WordPress Security 101 Plugin Recommendations Security Advisories Patchstack News Case Studies Bug Bounty

12 December, 2023

Multiple Vulnerabilities Patched in Themify Ultra Theme

                themify            

                settings change            

                privilege escalation            

                arbitrary file upload            

                php object injection            

                theme

8 December, 2023

Critical Vulnerability in Elementor Affecting 5+ Million Websites

                Critical Vulnerability            

                Elementor            

                arbitrary file upload            

6 December, 2023

WordPress 6.4.2 Security Release

wordpress

3 December, 2023

Fake CVE Phishing Campaign Tricks WordPress Users Into Installing Malware

                CVE-2023-45124            

                CVE            

Thrive Theme : Dismiss Tooltip to Privilege Escalation

29 November, 2023

Thrive Theme Vulnerability: Dismiss Tooltip to Privilege Escalation

                privilege escalation            

                thrive            

                theme            

Authenticated Stored XSS vulnerability in WooCommerce and Jetpack Plugin

15 November, 2023

Authenticated Stored XSS in WooCommerce and Jetpack Plugin

                xss            

                woocommerce            

                jetpack            

8 November, 2023

Arbitrary Attachment Render to XSS in Elementor Plugin

                xss            

                Elementor            

wordpress 6-3-2 security update technical analysis by patchstack

13 October, 2023

WordPress Core 6.3.2 Security Update - Technical Advisory

                WordPress core            

                security release            

12 October, 2023

Pre-Auth Arbitrary File Upload in User Submitted Posts Plugin

Critical Vulnerability

Two Path to Privilege Escalation Bugs Found In the Simple Membership Plugin

27 September, 2023

Two Paths to Privilege Escalation Vulnerability In The Simple Membership Plugin

                privilege escalation            

                simple membership            

Authenticated Privilege Escalation in Essential Addons for Elementor Plugin

15 September, 2023

Authenticated Privilege Escalation Vulnerability in Essential Addons for Elementor

                privilege escalation            

                Essential Addons for Elementor            

6 September, 2023

Unauthenticated PHP Object Injection in Flatsome Theme <= 3.17.5

                php object injection            

                flatsome            

« Previous 1 … 4 5 6 7 8 … 11 Next »

Security Advisories

Security Advisories

Multiple Vulnerabilities Patched in Themify Ultra Theme

Critical Vulnerability in Elementor Affecting 5+ Million Websites

WordPress 6.4.2 Security Release

Fake CVE Phishing Campaign Tricks WordPress Users Into Installing Malware

Thrive Theme Vulnerability: Dismiss Tooltip to Privilege Escalation

Authenticated Stored XSS in WooCommerce and Jetpack Plugin

Arbitrary Attachment Render to XSS in Elementor Plugin

WordPress Core 6.3.2 Security Update - Technical Advisory

Pre-Auth Arbitrary File Upload in User Submitted Posts Plugin

Two Paths to Privilege Escalation Vulnerability In The Simple Membership Plugin

Authenticated Privilege Escalation Vulnerability in Essential Addons for Elementor

Unauthenticated PHP Object Injection in Flatsome Theme <= 3.17.5

Monthly security advice

Website security

For plugin devs

For researchers

Resources

Patchstack

Socials

Website security

For plugin devs

For researchers

Resources

Patchstack

Socials