26 issues this week, with 6 so far unfixed – though Advanced CF7 DB (Advanced Contact form 7 DB) seems to be being worked on. All-in-one migration has multiple issues with one remaining unresolved. View this week’s vulnerable plugins list
The WPCampus Blog
Monarx provides an application security solution that protects WordPress websites. We are so grateful to have this company sponsor WPCampus 2019.
Pantheon is a website operations platform for Drupal and WordPress. We are so grateful to have this company as the doctoral sponsor for WPCampus 2019.
Modern Tribe is a digital agency for the modern university. We are so grateful to have this company sponsor WPCampus 2019.
CampusPress has powered WordPress Multisite networks for thousands of schools and universities around the world. WPMU DEV is giving WordPress superpowers to users around the world. We are so happy to have these companies as sponsors of WPCampus 2019.
Registration for WPCampus 2019 may be closed but no worries! You can still attend many of our amazing sessions virtually. With the exception of workshops, sessions from WPCampus 2019 will be live streamed with captioning, thanks to the generous support of our partners at Pantheon. Visit the watch page on Friday, July 26 and Saturday, […]
Vulnerable Plugins There are twenty nine issues this week, with only one unfixed. The most critical this week are Authenticated (low privileged user) Arbitrary Options Update vulnerability in the One Click SSL plugin (fix available) and in the WPTF Hybrid Composer plugin (fix available), and multiple critical issues in the File Manager (by mndpsingh287) plugin […]
Vulnerable Plugins There are twenty four issues this week, with five unfixed. The most critical this week is an unfixed Authenticated Arbitrary File Upload vulnerability with the MapsSVG Lite plugin and an unfixed Authenticate Remote Code Execution vulnerability in the Newsletter plugin. Both plugins have been closed in the public plugin repository. In addition, there […]
Vulnerable Plugins There are thirty four issues this week, with four unfixed. The most critical this week is an unfixed Arbitrary Password Reset vulnerability with the Ultimate Members plugin. Since this is a premium plugin, I do not have access to the source to verify. According to the disclosure, the vendor has stated the fix […]
For the WPCampus 2019 conference, the WPCampus community is excited to spend July 25 – 27 learning, networking, and sharing at Lewis and Clark College in Portland, Oregon. Every year at our events, we, as organizers, have enjoyed planning swag for our attendees, from travel mugs to bean bags for our phones. Swag is a […]