View this email in your browser
Podcast Episode #13
Patchstack Weekly: Vulnerability news and weekly knowledge

Hi Coffigniez​, it's another week of Patchstack Weekly update, and firstly, let's go over important vulnerabilities.
 

Limit Login Attempts (Spam Protection)

Vulnerability: Unauthenticated SQL Injection (SQLi)
Fixed in version: 5.1
Number of sites affected: 300+
CVSS 3.0 score: 8.6 (High - Can be exploited remotely without any authentication.)

Narnoo Distributor

Vulnerability: Unauthenticated LFI leading to Arbitrary File Read / RCE
Fixed in version: no known fix
Number of sites affected: N/A
CVSS 3.0 score: 7.3 (High - Can be exploited remotely without any authentication.)

If you are using any of the mentioned plugins, you need to update it to the latest version as soon as possible. Websites with Patchstack installed are protected from the security issues mentioned below.

You can find all the vulnerabilities from our vulnerability database
Weekly knowledge about Freemius library

This week Robert will talk a little more about the Freemius library updates, and why having a trustworthy ally in the fight to defend your website against attacks. This is an important decision to make before you need it, because if you delay then it may be too late to protect sites from compromise.👇

Read & listen the episode
Always keep your plugins updated. If possible, enable automatic updates. You can enable automatic updates with Patchstack here

If you are not protecting your WordPress site against plugin vulnerabilities yet go and start for free here.

Are you on Facebook? Join the Patchstack community and be the first to hear about new feature updates, news, and announcements.
LinkedIn
Facebook
Twitter
Spotify
Copyright © 2022 Patchstack, All rights reserved.
You are receiving this email because you opted in via our website.

Our mailing address is:
Patchstack
Akadeemia 1
Forwardspace
Parnu 80011
Estonia

Add us to your address book


Want to change how you receive these emails?
You can update your preferences or unsubscribe from this list.