August 7, 2024

Plugin: Forminator – Contact Form, Payment Form & Custom Form Builder Vulnerability: HubSpot Developer API Key Sensitive Information ExposurePatched Version: 1.29.2Recommended Action: Update to version 1.29.2, or a newer patched version Plugin: Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) Vulnerability: Authenticated (Contributor+) Stored Cross-Site ScriptingPatched Version: n/aRecommended Action: […]

Plugin: CTT Expresso para WooCommerce Vulnerability: Information Exposure via Unprotected DirectoryPatched Version: 3.2.13Recommended Action: Update to version 3.2.13, or a newer patched version Plugin: Gutenberg Blocks, Page Builder – ComboBlocks Vulnerability: Authenticated (Contributor+) Stored Cross-Site Scripting via redirectURL Parameter of Date Countdown WidgetPatched Version: 2.2.86Recommended Action: Update to version 2.2.86, or a newer patched version