Wordfence issued an advisory on a vulnerability patched in the popular Happy Addons for Elementor plugin, installed on over 400,000 websites. The security flaw could allow attackers to upload malicious scripts that execute when browsers visit affected pages. Happy Addons for Elementor The Happy Addons for Elementor plugin extends the Elementor page builder with dozens … Read more
A WordPress plugin add-on for the popular Elementor page builder recently patched a vulnerability affecting over 200,000 installations. The exploit, found in the Jeg Elementor Kit plugin, allows authenticated attackers to upload malicious scripts. Stored Cross-Site Scripting (Stored XSS) The patch fixed an issue that could lead to a Stored Cross-Site Scripting exploit that allows … Read more
Researchers have issued advisories for eleven separate Elementor add-on plugins with 15 vulnerabilities that can make it possible for hackers to upload malicious files. One of them is rated as a high threat vulnerability because it can allow hackers to bypass access controls, execute scripts and obtain sensitive data. Two Different Kinds Of Vulnerabilities The … Read more
WordPress is creating guides and tools to help publishers migrate to their block based editor Gutenberg and away from commercial WordPress page builders and private closed source content management systems like Wix. While it’s understandable that WordPress might want to help publishers and businesses migrate away from Wix, some perceive it as a somewhat controversial … Read more
The U.S. government National Vulnerability Database (NVD) issued an advisory about a vulnerability affecting Metform Elementor Contact Form Builder WordPress plugin that could leak sensitive information. Metform Elementor Contact Form Builder for WordPress The Metform Elementor Contact Form builder is a third party add-on to the popular Elementor page builder plugin with over over 200,000 … Read more
