October 11, 2023

Watch Out Wednesday – October 11, 2023

Plugin: affiliate-toolkit – WordPress Affiliate Plugin Vulnerability: Open Redirect via atkpout.phpPatched Version: n/aRecommended Action: No known patch available. Please review the vulnerability’s details in depth and employ mitigations based on your organization’s risk tolerance. It may be best to uninstall the affected software and find a replacement. Plugin: Slick Contact Forms Vulnerability: Authenticated (Contributor+) Stored […]

Watch Out Wednesday – October 11, 2023 Read More »

Watch Out Wednesday – October 11, 2023

Plugin: affiliate-toolkit – WordPress Affiliate Plugin Vulnerability: Open Redirect via atkpout.phpPatched Version: n/aRecommended Action: No known patch available. Please review the vulnerability’s details in depth and employ mitigations based on your organization’s risk tolerance. It may be best to uninstall the affected software and find a replacement. Plugin: Slick Contact Forms Vulnerability: Authenticated (Contributor+) Stored

Watch Out Wednesday – October 11, 2023 Read More »

Watch Out Wednesday – October 11, 2023

Plugin: affiliate-toolkit – WordPress Affiliate Plugin Vulnerability: Open Redirect via atkpout.phpPatched Version: n/aRecommended Action: No known patch available. Please review the vulnerability’s details in depth and employ mitigations based on your organization’s risk tolerance. It may be best to uninstall the affected software and find a replacement. Plugin: Slick Contact Forms Vulnerability: Authenticated (Contributor+) Stored

Watch Out Wednesday – October 11, 2023 Read More »

Watch Out Wednesday – October 11, 2023

Plugin: affiliate-toolkit – WordPress Affiliate Plugin Vulnerability: Open Redirect via atkpout.phpPatched Version: n/aRecommended Action: No known patch available. Please review the vulnerability’s details in depth and employ mitigations based on your organization’s risk tolerance. It may be best to uninstall the affected software and find a replacement. Plugin: Slick Contact Forms Vulnerability: Authenticated (Contributor+) Stored

Watch Out Wednesday – October 11, 2023 Read More »

Watch Out Wednesday – October 11, 2023

Plugin: Geo Controller Vulnerability: Authenticated (Administrator+) Stored Cross-Site ScriptingPatched Version: 8.5.3Recommended Action: Update to version 8.5.3, or a newer patched version Plugin: Booster for WooCommerce Vulnerability: Authenticated (Subscriber+) Information Disclosure via ShortcodePatched Version: 7.1.2Recommended Action: Update to version 7.1.2, or a newer patched version Plugin: Customer Reviews for WooCommerce Vulnerability: Missing AuthorizationPatched Version: 5.36.1Recommended Action:

Watch Out Wednesday – October 11, 2023 Read More »