October 23, 2024

Watch Out Wednesday – October 23, 2024

Plugin: Miniorange OTP Verification with Firebase Vulnerability: Authentication BypassPatched Version: 3.6.1Recommended Action: Update to version 3.6.1, or a newer patched version Plugin: Photo Gallery Slideshow & Masonry Tiled Gallery Vulnerability: Authenticated (Admin+) SQL InjectionPatched Version: 1.0.4Recommended Action: Update to version 1.0.4, or a newer patched version Plugin: Product Customizer Light Vulnerability: Authenticated (Author+) Stored Cross-Site […]

Watch Out Wednesday – October 23, 2024 Read More »

Watch Out Wednesday – October 23, 2024

Plugin: Miniorange OTP Verification with Firebase Vulnerability: Authentication BypassPatched Version: 3.6.1Recommended Action: Update to version 3.6.1, or a newer patched version Plugin: Fonto – Custom Web Fonts Manager Vulnerability: Authenticated (Author+) Stored Cross-Site Scripting via SVG File UploadPatched Version: 1.2.2Recommended Action: Update to version 1.2.2, or a newer patched version Plugin: WP Photo Album Plus

Watch Out Wednesday – October 23, 2024 Read More »