On the 25th of June 2024, Sansec released a security advisory article regarding the Polyfill supply chain attack. Intro Polyfill.js is a popular JavaScript library that provides modern functionality on older browsers that do not natively support it. The implementation of Polyfill.js is mostly attached to an HTML tag as a script. This allows the […]
On the 24th of June 2024, WordPress.org released a security update and recommended users update their sites as soon as possible. This WordPress core 6.5.5 security release addresses 3 different security vulnerabilities that affect multiple WordPress core versions. For many, WordPress automatically updates the core to the latest version. Check if your WordPress version is […]
Welcome to Patchstack’s WordPress vulnerability overview for the week of June 19 – 25, 2024. As the #1 vulnerability processor in the world, Patchstack brings you this report so you can stay safe even if you don’t use the Patchstack app (yet). The first part of the report outlines the most popular plugins you likely […]
Welcome to Patchstack’s WordPress vulnerability overview for the week of June 11 – 18, 2024. As the #1 vulnerability processor in the world, Patchstack brings you this report so you can stay safe even if you don’t use the Patchstack app (yet). And in addition to this week’s vulnerabilities, we’re happy to say that, on […]
This blog post is about WooCommerce Amazon Affiliates (WZone) plugin vulnerabilities. If you’re a WooCommerce Amazon Affiliates (WZone) user, please deactivate and delete the plugin since there is still no known patched version. Patchstack users are protected from this vulnerability. For plugin developers, we have security audit services and Enterprise API for hosting companies. About the WZone Plugin The […]
Welcome to Patchstack’s WordPress vulnerability overview for the week of May 29 to June 04 2024. As the #1 vulnerability processor in the world, Patchstack brings you this report so you can stay safe even if you don’t use the Patchstack app (yet). The first part of the report outlines the most popular plugins you […]
Patchstack user since: March 2023 When you have as much experience in the marketing world as James Traister and his team at Make Things New, you know your priorities. And for this ambitious team, security and revenue go hand in hand. In addition to protection from plugin vulnerabilities, Make Things New are true power users […]
Patchstack user since: June 2023 Raise your hand if you’ve applied a security update to one of your sites, only to see that something got broken in the process. Hand raised? Don’t worry – it’s a WordPress rite of passage. However, that doesn’t mean you should avoid updates and risk exposing your site to plugin […]
Patchstack user since: July 2022Threats blocked: 6,952 in the last 30 days across 44 websites WordPress updates are no longer just something you set and forget. With the increase in vulnerabilities, updates have become a weekly (and, in some cases, even daily) chore. If you have a solution that helps you prioritize and protects you […]
Patchstack user since: September 2023 Getting hacked isn’t pleasant in any scenario, but it’s never as critical as when you manage WordPress websites for clients. When Morten Ellegard, the owner of ellegaard ID, a web development and maintenance company, realized that a site in his portfolio was hacked, he started looking for solutions. Today, he […]