WordPress 4.7.3 is now available. This is a security release for all previous versions and it is strongly encouraged you to update your sites immediately. All previous WordPress versions contain critical security issues. Upgrading to latest version is recommended. WordPress versions 4.7.2 and earlier are affected by six security issues: Cross-site scripting (XSS) via media […]
Critical SQL Injection Vulnerability Found in NextGEN Gallery
NextGEN Gallery is one f widely used WordPress plugins. As per the statastics available in WordPress plugin directory, this plugin was downloaded more than 1+ million times. That means, this plugin should be used on large number of WordPress installation. Researcher found a critical SQL injection vulnerability in NextGEN Gallery plugin. This vulnerability allows an […]
CloudLinux HardenedPHP updated
CloudLinux is widely used operating system by web hosts. It provides better server security as well as server stability. CloudLinux also provides multiple PHP version selection. This allows end users to select appropriate PHP version for their accounts. They are also providing security updates for PHP versions which were discontinued by PHP community. Recently they […]
WordPress 4.5.3 Maintenance and Security Release
WordPress 4.5.3 is now available. This is a security release for all previous version and it is strongly recommended to upgrade your WordPress installation to latest version. WordPress versions 4.5.2 and earlier are affected by several security issues: redirect bypass in the customizer, two different XSS problems via attachment names, revision history information disclosure, oEmbed […]
CloudFlare cPanel plugin Vulnerability
CloudFlare protects and accelerates website using their CDN networks. Once you enable CloudFlare for your website, all your traffic is routed to their global networks. CloudFlare can be integrated with cPanel and they also provide cPanel plugin. A critical symlink attack vulnerability was detected in CloudFlare cPanel plugin version 5.3.2. This vulnerability may exist in […]
WHMCS Kayako Loginshare Security Patch
WHMCS is the leading web hosting automation platform. Handling signups, provisioning, billing and support. They also provide loginshare module to integrate third party Helpdesk like Kayako. Recently they released a security patch for Kayako Loginshare module and it is highly recommended to apply this patch. Only Kayako loginshare users need to apply this patch. This […]
Pingdom free plan change
Pingdom provides monitoring service for websites. As of now they are offering free (limited features) and paid monitoring service. On January 28, 2016, they will discontinue their existing free plan. They will continue offering free monitoring but it will have very limited features. The following features will be removed from their free plan: Public Status […]
Critical 0-day Remote Command Execution Vulnerability in Joomla
The Joomla security team have just released a new version of Joomla to patch a critical remote command execution vulnerability that affects all versions from 1.5 to 3.4. This is a serious vulnerability that can be easily exploited and is already in the wild. If you are using Joomla, you have to update it right […]
WordPress 4.2.4 Security Update and Maintenance Release
WordPress team had released a security update just few days ago. Yesterday they have released another security update and WordPress 4.2.4 is now available. WordPress 4.2.4 is now available. This is a security release for all previous versions and It is strongly recommended you to update your sites immediately to latest version. This release addresses […]
WordPress 4.2.3 Security and Maintenance Release
WordPress 4.2.3 was released today. This is a critical security release for all previous versions and we strongly encourage you to update your sites immediately. WordPress versions 4.2.2 and earlier are affected by a critical cross-site scripting vulnerability, which could allow anonymous users to compromise a site. They have also fixed an issue where it […]