Website Maintenance
How to Update WordPress Safely (Without Breaking Your Site)
The short answer To update WordPress safely, make a fresh backup, then update in this order: PHP (if needed), WordPress core, plugins a few at a time, then your theme, and check the site after each step, including forms and checkout. We recommend updating daily, because with AI, attacks on a newly published flaw now…
Forminator Vulnerability – Unauthenticated Stored Cross-Site Scripting via File Upload – CVE-2024-1794 | WordPress Plugin Vulnerability Report
Plugin Name: Forminator Key Information: Software Type: Plugin Software Slug: forminator Software Status: Active Software Author: wpmudev Software Downloads: 6,543,744 Active Installs: 500,000 Last Updated: March 29, 2024 Patched Versions: 1.29.1 Affected Versions: <= 1.29.0 Vulnerability Details: Name: Forminator <= 1.29.0 – Unauthenticated Stored Cross-Site Scripting via File Upload Type: Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’) CVE: CVE-2024-1794 CVSS Score: 7.2 (High) Publicly Published: March…
User Feedback Vulnerability – Unauthenticated Stored Cross-Site Scripting – CVE-2024-0903 | WordPress Plugin Vulnerability Report
Plugin Name: User Feedback Key Information: Software Type: Plugin Software Slug: userfeedback-lite Software Status: Active Software Author: smub Software Downloads: 1,054,695 Active Installs: 200,000 Last Updated: February 21, 2024 Patched Versions: 1.0.14 Affected Versions: <= 1.0.13 Vulnerability Details: Name: User Feedback – Create Interactive Feedback Form, User Surveys, and Polls in Seconds <= 1.0.13 – Unauthenticated Stored Cross-Site Scripting Title: Unauthenticated Stored Cross-Site Scripting Type: Improper Neutralization…
Starbox Vulnerability – the Author Box for Humans – Insecure Direct Object Reference – CVE-2024-0366 | WordPress Plugin Vulnerability Report
Plugin Name: Starbox – the Author Box for Humans Key Information: Software Type: Plugin Software Slug: starbox Software Status: Active Software Author: cifi Software Downloads: 441,960 Active Installs: 50,000 Last Updated: February 1, 2024 Patched Versions: 3.4.8 Affected Versions: <= 3.4.7 Vulnerability Details: Name: Starbox – the Author Box for Humans <= 3.4.7 Title: Insecure…
Depicter Slider Vulnerability – Cross-Site Request Forgery via save – CVE-2023-6493 | WordPress Plugin Vulnerability Report
Plugin Name: Depicter Slider Key Information: Software Type: Plugin Software Slug: depicter Software Status: Active Software Author: averta Software Downloads: 727,890 Active Installs: 80,000 Last Updated: January 4, 2024 Patched Versions: 2.0.7 Affected Versions: <= 2.0.6 Vulnerability Details: Name: Depicter Slider – Responsive Image Slider, Video Slider & Post Slider <= 2.0.6 – Cross-Site Request Forgery via save Title: Cross-Site Request Forgery via save Type: Cross-Site Request…
Avoiding DIY Pitfalls: Why Professional Support Matters
Managing a business is already a challenge. Now throw in managing a website without expertise. Juggling too much at once is sure to lead to some dropped balls. And when your head is in a thousand places at once, even minor issues can quickly escalate into major headaches and lost revenue. Consider This A small…
The High Cost of Waiting: Real-world Impacts of Slow Support Responses
Your website crashes during a sale. Pages load at a crawl. Online forms stop working. You reach out for support, only to wait helplessly as the precious minutes tick by without resolution. The lackadaisical response from your website management team obstructs progress and drains productivity across your business. As a small business owner, you feel…
WordPress Plugin Vulnerability Report – Comments – wpDiscuz – Unauthenticated SQL Injection
Plugin Name: Comments – wpDiscuz Key Information: Software Type: Plugin Software Slug: wpdiscuz Software Status: Active Software Author: advancedcoding Software Downloads: 2,865,421 Active Installs: 80,000 Last Updated: September 18, 2023 Patched Versions: 7.6.6 Affected Versions: <=7.6.5 Vulnerability Details: Name: wpDiscuz <= 7.6.5 – Unauthenticated SQL Injection Type: Improper Neutralization of Special Elements used in an…
Broken Website Emergency: First Steps to Diagnose and Fix
It’s every business owner’s nightmare – you wake up one morning to find your website is down. Or even worse, it’s up but full of glaring errors. Customers are complaining they can’t access your site or complete purchases. Your daily traffic has plummeted. Panic sets in. What caused this? Who can fix it? How quickly…
What Are the Risks of Not Performing WordPress Maintenance?
Running a business? It’s a bit like a high-stakes game of whack-a-mole, isn’t it? Always something popping up that needs your attention. And if you’re operating a WordPress site, you’ve got one more mole to keep an eye on. But here’s the thing: WordPress, while fantastic, is the most popular CMS on the Internet, and…