WordPress released an official plugin that adds support for a cutting edge technology called speculative loading that can help boost site performance and improve the user experience for site visitors. Speculative Loading Speculative loading is a technique that fetches pages or resources before a user clicks a link to navigate to another webpage. The official … Read more
A widely used add-on plugin for a popular WordPress site builder installed an anti-piracy script that essentially unpublishes all posts. WordPress developers are livid, with some calling the script a malware, a backdoor, and a violation of laws. BricksUltimate Add-On For Bricks Builder Bricks site builder is a site building platform for WordPress that is … Read more
A popular WordPress backup plugin installed in over 200,000 websites recently patched a high severity vulnerability that could lead to a denial of service attack. Wordfence assigned a CVSS severity level rating of High, with a score of 7.5/10, indicating that plugin users should take note and update their plugin. Backuply Plugin The vulnerability affects the … Read more
A significant security vulnerability has been identified and patched in the widely used File Manager plugin for WordPress, affecting over 1 million websites. The vulnerability is rated 8.1 out of 10 in severity and could potentially allow unauthenticated attackers to gain access to sensitive information including data contained in site backups. Unauthenticated Attack Vulnerabilities What … Read more
A popular WordPress plugin for privacy compliance with over 800,000 installations recently patched a stored XSS vulnerability that could allow an attacker to upload malicious scripts for launching attacks against site visitors. Complianz | GDPR/CCPA Cookie Consent WordPress Plugin The Complianz plugin for WordPress is a powerful tool that helps website owners comply with privacy … Read more
Security researchers at Wordfence detailed a critical security flaw in the MW WP Form plugin, affecting versions 5.0.1 and earlier. The vulnerability allows unauthenticated threat actors to exploit the plugin by uploading arbitrary files, including potentially malicious PHP backdoors, with the ability to execute these files on the server. MW WP Form Plugin The MW … Read more
Accelerated Mobile Pages WordPress plugin, with over 100,000 installations, patched a medium severity vulnerability that could allow an attacker to inject malicious scripts to be executed by website visitors. Cross-Site Scripting Via Shortcode A cross-site scripting (XSS) is one of the most frequent kind of vulnerability. In the context of WordPress plugins, XSS vulnerabilities happen … Read more
The popular Fluent Forms Contact Form Builder plugin for WordPress, with over 300,000 installations, was discovered to contain a SQL Injection vulnerability that could allow database access to hackers. Fluent Forms Contact Form Builder Fluent Forms Contact Form Builder is one of the most popular contact forms for WordPress, with over 300,000 installations. Its drag-and-drop … Read more
The popular LiteSpeed WordPress plugin patched a vulnerability that compromised over 4 million websites, allowing hackers to upload malicious scripts. LiteSpeed was notified of the vulnerability two months ago on August 14th and released a patch in October. Cross-Site Scripting (XSS) Vulnerability Wordfence discovered a Cross-Site Scripting (XSS) vulnerability in the LiteSpeed plugin, the most … Read more
Jetpack WordPress plugin by Automattic released an updated version that expands on AI-based features and the ability to earn more from email subscriptions. Jetpack WordPress Plugin 12.7 Jetpack is a modular all-in-one plugin that brings virtually every important functionality that a website or business may need. Because it’s modular a user only needs to select … Read more
Artificial intelligence (AI) chatbots have opened up a world of possibilities for people to dabble in projects they might not have tackled due to lack of experience. As someone who uses WordPress but doesn’t have coding experience, I thought it would be interesting to see which AI could help create a simple plugin. For this … Read more
The U.S. government National Vulnerability Database (NVD) issued an advisory about a vulnerability affecting Metform Elementor Contact Form Builder WordPress plugin that could leak sensitive information. Metform Elementor Contact Form Builder for WordPress The Metform Elementor Contact Form builder is a third party add-on to the popular Elementor page builder plugin with over over 200,000 … Read more
The U.S. Government National Vulnerability Database (NVD) published notice of a critical vulnerability affecting the Forminator WordPress Contact Form plugin up to an including version 1.24.6. Unauthenticated attackers can upload malicious files to websites which, according to the warning, “may make remote code execution possible.” The vulnerability score rating is 9.8, on a scale of … Read more
Link Reader, a popular ChatGPT plugin used for browsing the web, was noticeably missing from the ChatGPT Plugin Store. Screenshot from ChatGPT, August 2023 Users took to Twitter to express their concerns over the missing feature. Just when you think @OpenAI haven’t neutered #ChatGPT, hot on the heels of eliminating the (average) @Microsoft Bing search … Read more
ByteDance, the parent company, has released its popular video editing software CapCut as a plugin for ChatGPT users. The new plugin leverages generative AI to create everything you need for publishing video content on TikTok and other social channels. Screenshot from ChatGPT, July 2023 It only takes a one-sentence prompt to describe the video’s theme, … Read more
Ultimate Member WordPress plugin vulnerability, with over 200,000 active installations is being actively exploited on unpatched WordPress sites. The vulnerability is said to require trivial effort to bypass security filters. Ultimate Member Plugin Vulnerability The Ultimate Member WordPress plugin enables publishers to create online communities on their websites. The plugin works by creating a frictionless … Read more
As Google continues the countdown to deprecate Universal Analytics properties in less than 24 hours on July 1, Google Analytics users have little hope that there will be a reprieve. For those hoping that Google will perhaps extend the deadline to switch to GA4, (it’s 2 days from now!) they are not. https://t.co/RzBntq1Ea2 — Dr. … Read more
With a total of 580 ChatGPT plugins, OpenAI aims to bring the total in the plugin store to 1,000. We just zoomed past 500 ChatGPT plugins. Next up, 1000! 🚀 What is your favorite plugin? I am personally enjoying all the chart / diagram ones! 🧵👇🏻 — Logan.GPT (@OfficialLoganK) June 21, 2023 While exploring the … Read more
