27th Nov 2023
WooCommerce <= 8.1.1 - Cross Site Scripting (XSS)
A new, medium severity vulnerability has been disclosed in the WooCommerce plugin.
Where possible, WP NET will deploy this update on behalf of our customers, but in some cases incompatibility with themes and / or other plugins may prevent us from doing so.
We recommend that all WooCommerce users update to 8.2 at your earliest convenience.
If ...
17th Nov 2023
Slider Revolution - Vulnerabilities Disclosed
Two vulnerabilities have recently been disclosed in the widely used Slider Revolution (revslider) plugin.
Author+ Arbitrary File Upload vulnerability <= 6.6.15 (CVSS score: 8.4)
Cross Site Scripting (XSS) vulnerability <= 6.6.14 (CVSS score: 6.5)
For more details, please see this PatchStack page.
Due to the fact that Revolution ...