WordPress Rife Elementor Extensions & Templates plugin <= 1.1.5 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities

Multiple Authenticated Stored Cross-Site Scripting XSS vulnerabilities discovered by WordFence in WordPress Rife Elementor Extensions & Templates plugin versions = 1.1.5. Solution Update the WordPress Rife Elementor Extensions & Templates plugin to the latest available version at least 1.1.6...

WordPress Elementor – Header, Footer & Blocks Template plugin <= 1.5.7 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities

Multiple Authenticated Stored Cross-Site Scripting XSS vulnerabilities discovered by WordFence in WordPress Elementor – Header, Footer & Blocks Template plugin versions = 1.5.7. Solution Update the WordPress Elementor – Header, Footer & Blocks Template plugin to the latest available version at...

WordPress WooLentor plugin <= 1.8.5 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities

Multiple Authenticated Stored Cross-Site Scripting XSS vulnerabilities discovered by WordFence in WordPress WooLentor plugin versions = 1.8.5. Solution Update the WordPress WooLentor plugin to the latest available version at least 1.8.6...

WordPress Elementor Addon Elements plugin <= 1.11.1 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities

Multiple Authenticated Stored Cross-Site Scripting XSS vulnerabilities discovered by WordFence in WordPress Elementor Addon Elements plugin versions = 1.11.1. Solution Update the WordPress Elementor Addon Elements plugin to the latest available version at least 1.11.2...

WordPress DethemeKit For Elementor plugin <= 1.5.5.4 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities

Multiple Authenticated Stored Cross-Site Scripting XSS vulnerabilities discovered by WordFence in WordPress DethemeKit For Elementor plugin versions = 1.5.5.4. Solution Update the WordPress DethemeKit For Elementor plugin to the latest available version at least 1.5.5.5...

WordPress WP Page Builder plugin <= 1.2.3 - Multiple Stored Cross-Site Scripting (XSS) vulnerabilities

Multiple Stored Cross-Site Scripting XSS vulnerabilities discovered by WordFence in WordPress WP Page Builder plugin versions = 1.2.3. Solution Update the WordPress WP Page Builder plugin to the latest available version at least 1.2.4...

WordPress WP Page Builder plugin <= 1.2.3 - Insecure Default Configuration vulnerability

Insecure Default Configuration vulnerability discovered by WordFence in WordPress WP Page Builder plugin versions = 1.2.3. Solution Update the WordPress WP Page Builder plugin to the latest available version at least 1.2.4...

WordPress Facebook for WordPress plugin <= 2.2.2 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by WordFence in WordPress Facebook for WordPress plugin versions = 2.2.2. Solution Update the WordPress Facebook for WordPress plugin to the latest available version at least 3.0.0...

WordPress Squared premium theme <= 1.38 - Unauthenticated Arbitrary File Upload and Option Deletion

Unauthenticated Arbitrary File Upload and Option Deletion discovered by WordFence in WordPress Squared premium theme versions = 1.38. Solution Update the WordPress Squared premium theme to the latest available version at least 2.0.0...

Thrive Apprentice premium plugin <= 2.3.9.3 - Unauthenticated Option Update vulnerability

Unauthenticated Option Update vulnerability discovered by WordFence in Thrive Apprentice premium plugin versions = 2.3.9.3. Solution Update the Thrive Apprentice premium plugin to the latest available version at least 2.3.9.4...

WordPress Thrive Themes Builder premium plugin <= 2.2.3 - Unauthenticated Option Update vulnerability

Unauthenticated Option Update vulnerability discovered by WordFence in WordPress Thrive Themes Builder premium plugin versions = 2.2.3. Solution Update the WordPress Thrive Themes Builder premium plugin to the latest available version at least 2.2.4...

WordPress Thrive Ultimatum premium plugin <= 2.3.9.3 - Unauthenticated Option Update vulnerability

Unauthenticated Option Update vulnerability discovered by WordFence in WordPress Thrive Ultimatum premium plugin versions = 2.3.9.3. Solution Update the WordPress Thrive Ultimatum premium plugin to the latest available version at least 2.3.9.4...

WordPress Thrive Leads Version premium plugin <= 2.3.9.3 - Unauthenticated Option Update vulnerability

Unauthenticated Option Update vulnerability discovered by WordFence in WordPress Thrive Leads Version premium plugin versions = 2.3.9.3. Solution Update the WordPress Thrive Leads Version premium plugin to the latest available version at least 2.3.9.4...

WordPress Voice premium theme <= 1.33 - Unauthenticated Arbitrary File Upload and Option Deletion

Unauthenticated Arbitrary File Upload and Option Deletion discovered by WordFence in WordPress Voice premium theme versions = 1.33. Solution Update the WordPress Voice premium theme to the latest available version at least 2.0.0...

WordPress Performag premium theme <= 1.200.9 - Unauthenticated Arbitrary File Upload and Option Deletion

Unauthenticated Arbitrary File Upload and Option Deletion discovered by WordFence in WordPress Performag premium theme versions = 1.200.9. Solution Update the WordPress Performag premium theme to the latest available version at least 2.0.0...

WordPress Luxe premium theme <= 1.32 - Unauthenticated Arbitrary File Upload and Option Deletion

Unauthenticated Arbitrary File Upload and Option Deletion discovered by WordFence in WordPress Luxe premium theme versions = 1.32. Solution Update the WordPress Luxe premium theme to the latest available version at least 2.0.0...

WordPress Thrive Headline Optimizer premium plugin <= 1.3.7.2 - Unauthenticated Option Update vulnerability

Unauthenticated Option Update vulnerability discovered by WordFence in WordPress Thrive Headline Optimizer premium plugin versions = 1.3.7.2. Solution Update the WordPress Thrive Headline Optimizer premium plugin to the latest available version at least 1.3.7.3...

Flaws in Two Popular WordPress Plugins Affect Over 7 Million Websites

Researchers have disclosed vulnerabilities in multiple WordPress plugins that, if successfully exploited, could allow an attacker to run arbitrary code and take over a website in certain scenarios. The flaws were uncovered in Elementor, a website builder plugin used on more than seven million...

WordPress Elementor Website Builder plugin <= 3.1.1 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities

Multiple Authenticated Stored Cross-Site Scripting XSS vulnerabilities found by WordFence in WordPress Elementor Website Builder plugin versions = 3.1.1. Solution Update the WordPress Elementor Website Builder plugin to the latest available version at least 3.1.4...

WordPress Tutor LMS plugin <= 1.7.6 - Unprotected AJAX Action to Privilege Escalation vulnerability

Unprotected AJAX Action to Privilege Escalation vulnerability discovered by WordFence in WordPress Tutor LMS plugin versions = 1.7.6. Solution Update the WordPress Tutor LMS plugin to the latest available version at least 1.7.7...