Month: March 2023

All In One SEO Patches Multiple Stored XSS Vulnerabilities in Version 4.3.0 

Wordfence has published the details of two stored XSS vulnerabilities the company responsibly disclosed to the developers of the All In One SEO plugin in January 2023. The vulnerabilities potentially impacted more than 3 million users on versions 4.2.9 and earlier. One vulnerability, which received a 6.4 (Medium) CVSS score, Wordfence attributes to insufficient input…

Read More

WordPress 6.2 Openverse Integration Updated to Upload Inserted Images

WordPress 6.2’s Openverse integration is getting some last minute changes after contributors expressed concerns about it hotlinking images by default. The new feature allows users to quickly insert free, openly-licensed media into their content. It also allows users to upload external images through a button in the block toolbar, but this creates an extra step…

Read More

Archives