WordPress Plugin Vulnerabilities – Aug 2019

Published by wensumdotnet on

WordPress Plugin Vulnerabilities
These plugins were recently found to have vulnerabilities. All, apart from one, are patched in their latest versions and are safe to use after updating.

1. OneSignal – Web Push Notifications
This plugin has not yet been patched. You are advised to replace it with a different plugin.

2. All-in-One WP Migration
Update to latest patched version.

3. WPS Hide Login
Update to latest patched version.

4. Photo Gallery by 10Web
Update to latest patched version.

5. Email Subscribers & Newsletters
Update to latest patched version.

6. Contact Form & SMTP Plugin for WordPress
Update to latest patched version.

7. Everest Forms
Update to latest patched version.

8. Adaptive Images for WordPress
Update to latest patched version.

9. AdRotate Banner Manager
Update to latest patched version.

10. Contact Form 7 Dynamic Text Extension
Update to latest patched version.

11. Blog2Social: Social Media Auto Post & Scheduler
Update to latest patched version.

12. Simple Membership
Update to latest patched version.

13. Advanced Contact form 7 DB
Update to latest patched version.

14. Coming Soon Page & Maintenance Mode
Update to latest patched version.

15. WordPress Ultra Simple Paypal Shopping Cart
Update to latest patched version.

16. Category Specific RSS feed Subscription
Update to latest patched version.

17. Appointment Hour Booking
Update to latest patched version.