Blog

Watch Out Wednesday – February 14, 2024

Plugin: Passster – Password Protect Pages and Content Vulnerability: Missing Authorization to Sensitive Information ExposurePatched Version: 4.2.6.3Recommended Action: Update to version 4.2.6.3, or a newer patched version Plugin: ImageRecycle pdf & image compression Vulnerability: Cross-Site Request Forgery to Settings Update in enableOptimizationPatched Version: 3.1.14Recommended Action: Update to version 3.1.14, or a newer patched version Plugin: […]

Watch Out Wednesday – February 14, 2024 Read More »

Watch Out Wednesday – February 14, 2024

Plugin: ImageRecycle pdf & image compression Vulnerability: Cross-Site Request Forgery to Settings Update in enableOptimizationPatched Version: 3.1.14Recommended Action: Update to version 3.1.14, or a newer patched version Plugin: WP Shortcodes Plugin — Shortcodes Ultimate Vulnerability: Authenticated(Contributor+) Stored Cross-Site Scripting via shortcodePatched Version: 7.0.2Recommended Action: Update to version 7.0.2, or a newer patched version Plugin: ImageRecycle

Watch Out Wednesday – February 14, 2024 Read More »

Watch Out Wednesday – February 7, 2024

Plugin: Active Products Tables for WooCommerce. Professional products tables for WooCommerce store  Vulnerability: Missing AuthorizationPatched Version: 1.0.6.2Recommended Action: Update to version 1.0.6.2, or a newer patched version Plugin: Html5 Video Player Vulnerability: Unauthenticated SQL Injection via idPatched Version: 2.5.25Recommended Action: Update to version 2.5.25, or a newer patched version Plugin: Restrict Usernames Emails Characters Vulnerability:

Watch Out Wednesday – February 7, 2024 Read More »

Watch Out Wednesday – February 7, 2024

Plugin: Active Products Tables for WooCommerce. Professional products tables for WooCommerce store  Vulnerability: Missing AuthorizationPatched Version: 1.0.6.2Recommended Action: Update to version 1.0.6.2, or a newer patched version Plugin: NEX-Forms – Ultimate Form Builder – Contact forms and much more Vulnerability: Missing Authorization via restore_records()Patched Version: 8.5.7Recommended Action: Update to version 8.5.7, or a newer patched

Watch Out Wednesday – February 7, 2024 Read More »

Is Sabre Scribe Still Relevant in 2024?

The Evolution of Travel Technology: Sabre Scribe’s Sunset in 2022 and the Resilient Legacy Introduction In the dynamic realm of travel technology, the sunset of Sabre Scribe in 2022 marked a significant turning point for travel agencies worldwide. Sabre Scribe, a long-standing and trusted tool for travel professionals, bid farewell as Sabre Corporation shifted its

Is Sabre Scribe Still Relevant in 2024? Read More »

Watch Out Wednesday – January 17, 2024

Plugin: Display custom fields in the frontend – Post and User Profile Fields Vulnerability: Insecure Direct Object Reference to Authenticated (Contributor+) Post Meta DisclosurePatched Version: 1.3.0Recommended Action: Update to version 1.3.0, or a newer patched version Plugin: Order Export & Order Import for WooCommerce Vulnerability: Authenticated (Shop Manager+) Arbitrary File Upload via upload_import_filePatched Version: 2.4.4Recommended

Watch Out Wednesday – January 17, 2024 Read More »

Watch Out Wednesday – January 17, 2024

Plugin: Woocommerce Vietnam Checkout Vulnerability: Authenticated (Admin+) Stored Cross-Site ScriptingPatched Version: 2.0.8Recommended Action: Update to version 2.0.8, or a newer patched version Plugin: Newsletter – Send awesome emails from WordPress Vulnerability: Cross-Site Request ForgeryPatched Version: 8.0.7Recommended Action: Update to version 8.0.7, or a newer patched version Plugin: ARMember – Membership Plugin, Content Restriction, Member Levels,

Watch Out Wednesday – January 17, 2024 Read More »

Watch Out Wednesday – January 3, 2024

Plugin: Complianz – GDPR/CCPA Cookie Consent Vulnerability: Authenticated(Administrator+) Stored Cross-site Scripting via settingsPatched Version: 6.5.6Recommended Action: Update to version 6.5.6, or a newer patched version Plugin: WooCommerce Easy Duplicate Product Vulnerability: Missing Authorization via wedp_duplicate_product_actionPatched Version: 0.3.0.8Recommended Action: Update to version 0.3.0.8, or a newer patched version Plugin: WooCommerce Warranty Requests Vulnerability: Missing AuthorizationPatched Version:

Watch Out Wednesday – January 3, 2024 Read More »

Watch Out Wednesday – December 20, 2023

Plugin: E2Pdf – Export To Pdf Tool for WordPress Vulnerability: Authenticated (Administrator+) Arbitrary File UploadPatched Version: 1.20.26Recommended Action: Update to version 1.20.26, or a newer patched version Plugin: Image horizontal reel scroll slideshow Vulnerability: Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodePatched Version: 13.4Recommended Action: Update to version 13.4, or a newer patched version Plugin: Simple

Watch Out Wednesday – December 20, 2023 Read More »