Watch Out Wednesday – December 21, 2022

This Week’s Watch Out Wednesday shows the latest WordPress vulnerabilities including WP Social, ProfilePress, and more!

Plugin: WP CSV to Database

Vulnerability: CrossSite Request Forgery (CSRF) vulnerability
Patched Version: None
Recommended Action: Deactivate and delete. This plugin has been closed as of December 15, 2022 and is not available for download. This closure is permanent.

Plugin: GS Insever Portfolio

Vulnerability: Auth. Broken Access Control vulnerability
Patched Version: None
Recommended Action: No patched version is available. No reply from the vendor.

Plugin: WP Social

Vulnerability: Auth. Sensitive Information Disclosure vulnerability
Patched Version: least 2.0
Recommended Action: Update the WordPress Wp Social plugin to the latest available version (at least 2.0).

Plugin: Robo Gallery

Vulnerability: Auth. Broken Access Control vulnerability
Patched Version: 3.2.11
Recommended Action: Update the WordPress Robo Gallery plugin to the latest available version (at least 3.2.11).

Plugin: ProfilePress

Vulnerability: Auth. PHP Object Injection vulnerability
Patched Version: 4.4.0
Recommended Action: Update the WordPress ProfilePress plugin to the latest available version (at least 4.4.0).

Plugin: Sunshine Photo Cart

Vulnerability: Reflected CrossSite Scripting (XSS) vulnerability
Patched Version: None
Recommended Action: No patched version available.

Plugin: WP Table Reloaded

Vulnerability: Auth. Stored CrossSite Scripting (XSS) vulnerability
Patched Version: None
Recommended Action: No patched version available.

Plugin: WP Custom Admin Interface

Vulnerability: Auth. PHP Object Injection vulnerability
Patched Version: 7.29
Recommended Action: Update the WordPress WP Custom Admin Interface plugin to the latest available version (at least 7.29).

***
Check out the WoW Archive for past Watch Out Wednesday posts.

About the Author

FocusWP provides educational and informational resources to help you improve your business and serve your clients. Go get 'em, Boss!

0 Comments

Submit a Comment

Your email address will not be published. Required fields are marked *

Related Posts

See our site in 3D!

Subscribe to our newsletter and we’ll send you a pair of FocusWP 3D glasses!

Join our free, private Facebook group to network with like minded business owners and pick up tons of useful tips and resources.

Get Focused

Jump on our email list to get weekly tips for getting the most out of your FocusWP team, including task inspo, sample ticket briefs, pricing suggestions, and even email swipe files to help you effortlessly sell to your clients.

We will also occasionally share cool tools we are obsessed with, educational resources, and useful tips to help you run a profitable digital business. 

We'll do our best to send emails at times convenient for you.
This field is for validation purposes and should be left unchanged.