Cross-Site Scripting vulnerabilities were found on the popular WordPress website builder plugin Elementor, installed on over 7 million websites. The vulnerability allows users with access to the Elementor editor to add Javascript to posts which can result to site take-over in the worst cases.

Initial patches were implemented starting from version 3.1.2, however, further fixes have been applied since then, so we recommend updating to the latest version available.

For more information, please check the official public release.

If you have questions, don’t hesitate to contact our support team.

WordPress 5.7 “Esperanza” Release

WordPress 5.7 “Esperanza”, the first WP update for 2021, has just been released. It brings new functionality and more control to the WP editor without having to deal too much with custom code. From better controls to a fresh new color palette, editing in WP 5.7 will be simpler than ever.

Learn about all the cool new features by checking out the official public release.

WooCommerce 5.1 Release

WooCommerce 5.1 is now released. This is a minor release, which means everything is backward compatible with the previous versions. This update brings about some minor bug fixes along with improvements to the WC Admin.

For more information, please check the official public release.

If you have questions, don’t hesitate to contact our support team

WooCommerce 5.0 has now arrived. While this is only a minor release, it is another major step towards the future of WooCommerce and all WooCommerce websites.

Included in this update are bugfixes and minor quality of life improvements. This update should also be backwards compatible.

For more information, please check the official public release.

If you have questions, don’t hesitate to contact our support team

Two Cross-Site Request Forgery (CSRF) vulnerabilities were discovered in NextGen Gallery, a WordPress plugin installed in over 800,000 WordPress websites. Malicious attackers could potentially exploit these vulnerabilities leading to a site takeover, malicious redirects, spam injection, phishing, and much more.

A security patch has since been released to address these vulnerabilities.

For more information, please check the official public release.

If you have questions, don’t hesitate to contact our support team.

The WordPress plugin Popup Builder – Responsive WordPress Pop up – Subscription & Newsletter has been found to suffer from a security flaw relating to authorization issues in most AJAX methods.

The vulnerability could be exploited by attackers to send out newsletters with custom content, or to delete or import newsletter subscribers.

For more information, please check the official public release.

If you have questions, don’t hesitate to contact our support team.