WordPress version 5.4.2 has now been released. This is a security and maintenance release so it is recommended to update to this version as soon as possible, especially if you are experiencing any bugs on your current WordPress version. WP … [Read more...]

The Wordfence team reports at least 130 million attacks were detected between May 29 to May 31, 2020. The attacks were intended to harvest a website's database credentials by downloading the configuration files. Most of the … [Read more...]

WooCommerce 4.2 release WooCommerce 4.2 is now available. In development since April 2020, it has about 294 commits from 28 contributors. This is a backwards-compatible minor release focusing on stability and performance. For more … [Read more...]

Several vulnerabilities were previously discoverd on the plugin Page Builder: PageLayer – Drag and Drop website builder, a WordPress plugin actively installed on over 200,000 websites. This marks another Page Builder plugin with vulnerabilities … [Read more...]

During a recent investigation, the team at Sucuri have identified malware that collects sensitive data currently spreading to target WooCommerce websites in compromised hosting environments. The malware is spread via an ongoing wave of … [Read more...]

A vulnerability in the plugin Site Kit by Google, a WordPress plugin installed on over 400,000 sites, was discovered last month. Site Kit is the all-in-one solution to integrate a WordPress website with the critical Google tools. The flaw … [Read more...]

 On May 4, 2020, two vulnerabilities were discovered on the Page Builder by SiteOrigin plugin, a WordPress plugin actively installed on over 1,000,000 sites. If an attacker can trick a site administrator to perform a planned action … [Read more...]

WooCommerce 4.1 release WooCommerce 4.1 is now available. It has been in development since March 2020 and has around 400 commits from 28 contributors. This release focuses on various performance improvements and stability fixes. For more … [Read more...]

An ongoing attack is currently being carried out exploiting vulnerable users of the plugins: Elementor Pro and Ultimate Addons for Elementor. It is estimated that Elementor Pro is installed on over 1 million sites and that Ultimate … [Read more...]