Two exposures were disclosed in NextGen Gallery, including a critical Cross-Site Request Forgery (CSRF) leading to full Remote Code Execution (RCE). These
Four vulnerabilities were disclosed recently with Ninja Forms, a WordPress plugin that is used by over a million sites. These vulnerabilities could
Passwordless Logins is a new way to lock down your WordPress site while making it easier for you to log in securely
Zoho CRM Lead Magnet Plugin version 1.6.9 is vulnerable to an Authenticated Cross-Site Scripting attack. The vulnerability would allow an attacker to
Broken Link Checker version 1.11.8 is vulnerable to an Authenticated Cross-Site Scripting attack. Uninstall and delete the plugin. Manage WP is
All In One SEO Pack version 3.2.6 and below is vulnerable to a Stored Cross-Site Scripting attack. An attacker will need to
WordPress websites are not set and go system. Once your site is launched, it requires ongoing maintenance and frequent updating. Much like
There is a new WordPress version 5.1.1 available for community. This security and maintenance release introduces 10 fixes and enhancements, including changes
Partner with WordPromise today — upgrades, security, performance and edits handled by a dedicated team, while you focus on your business.