Patchstack
LightNews LightNews
banner
patchstack.com
Patchstack
@patchstack.com
59 followers 7 following 23 posts
Fastest vulnerability protection for next-gen #WordPress security!

Official security partner for the leading web hosting companies, agencies, and plugin devs.

https://patchstack.com
Posts Replies Media Videos
patchstack.com
Big news from our partners at @rapydcloud.bsky.social 🚀

We're thrilled to support the launch of Rapyd Cloud 2.0

What’s new:
✅ Multiple site plans
✅ An Agency Partnership Program
✅ A revamped dashboard

👉 Check out their announcement: rapyd.cloud/blog/introdu...

#ManagedHosting #Cybersecurity
Introducing Rapyd Cloud 2.0: Multiple Site Plans Are Here! 🔥
Rapyd Cloud 2.0 is the next evolution of the Hosting platform and comes with Multiple Site Plans, Enhanced Hosting Experience, and Agency Partnership Program!
rapyd.cloud
May 13, 2025 at 10:46 AM
patchstack.com
💻 #CloudFest Hackathon day 2 is in full swing and the team, led by Nestor Angulo De Ugarte and John Blackbourn, is racking their brains. 🧠⚡️

Curious to see the results? See the final presentations tomorrow at 3:55 PM at the Ring Stage in Europa Park. 👀

#CFHack #CFHack2025 #cloudfest
March 16, 2025 at 8:21 PM
patchstack.com
Unauthenticated Arbitrary File Upload Vuln in Chaty Pro plugin 🛡️

It suffers from an arbitrary file upload vuln. An attacker can upload a malicious file and take over the site 🚫

It was fixed in 3.3.4 ✅

With Patchstack protection activated, you're already protected 🛡️

patchstack.com/articles/una...
Arbitrary File Upload Vulnerability Patched in Chaty Pro Plugin
Learn about the critical security vulnerabilities in the Chaty Pro plugin. Protect your site from unauthorized access and potential takeovers.
patchstack.com
March 5, 2025 at 8:58 AM
patchstack.com
Reflected XSS Patched in Essential Addons for Elementor 🛠️

It happens due to insufficient validation of the popup-selector query argument. 🤔

It got fixed in 6.0.15 ✅

If you have Patchstack protection enabled, you're already protected. 🛡️

patchstack.com/articles/ref...
Reflected XSS Patched in Essential Addons for Elementor Affecting 2+ Million Sites - Patchstack
🚨 A reflected XSS vulnerability in the Essential Addons for Elementor plugin (2M+ installs) has been patched in version 6.0.15 (CVE-2025-24752). Update now to stay secure! Patchstack customers are alr...
patchstack.com
February 24, 2025 at 10:58 AM
patchstack.com
Critical Privilege Escalation Patched in KLEO Theme’s Plugin. 🔒

It occurs due to broken logic in the FB social login process. ❌

Update it immediately to at least 5.4.0 ⬆️

If you have Patchstack protection enabled, you're already protected. ✅

patchstack.com/articles/cri...
Critical Privilege Escalation Patched in KLEO Theme's Plugin - Patchstack
A critical privilege escalation vulnerability was found in the K Elements plugin, affecting KLEO theme users. Update to version 5.4.0 to stay secure. Patchstack customers are already protected.
patchstack.com
February 20, 2025 at 10:05 AM
patchstack.com
#WCAsia is just around the corner, and here at #Patchstack, we've decided to host a Capture The Flag event 🚩

Don't miss out—mark your calendars for 20-22 February 📆

There are also some amazing prizes for the best hackers out there 💰

ctf.patchstack.com
February 18, 2025 at 9:17 AM
patchstack.com
🚨 Rare Case of Privilege Escalation in Admin and Site Enhancements Plugin.

It occurs due to broken logic on the “View Admin as Role”🤔

Update it immediately to at least 7.6.3🔧

If you have Patchstack protection enabled, you are already automatically protected🛡️

patchstack.com/articles/rar...
Rare Case of Privilege Escalation in ASE Plugin Affecting 100k+ Sites - Patchstack
Critical privilege escalation vulnerability in Admin and Site Enhancements (ASE) plugin (≤7.6.2.1). Update to 7.6.3 or stay protected with Patchstack.
patchstack.com
February 6, 2025 at 10:36 AM
patchstack.com
🚨 high-priority vulnerability has been fixed in the "Better Find and Replace" plugin. It is expected to become mass exploited!

Update the plugin immediately to at least 1.6.8

If you have Patchstack protection enabled, you are already automatically protected 🛡️

patchstack.com/articles/pri...
Privilege Escalation Vulnerability Patched in Better Find and Replace Plugin - Patchstack
Privilege Escalation vulnerability discovered in the Better Find and Replace plugin (CVE-2025-24734), affecting versions 1.6.7 and below. Update to version 1.6.8 or stay protected with Patchstack.
patchstack.com
January 31, 2025 at 10:45 AM
patchstack.com
Our latest newsletter is live! 🚀

Inside, you'll find:
🍰 The security layer cake
📜 Vulnerability advisories
📰 News and tips

Read it here:
preview.mailerlite.io/preview/761...
January 16, 2025 at 1:48 PM
patchstack.com
🚨 Critical Vulnerability Patched in GiveWP Plugin.

Versions 3.19.3 and below suffer from an unauthenticated PHP Object Injection vuln. 💻

This was fixed in version 3.19.4, so update ASAP. 🛠️

As a paid Patchstack user you're protected from this vuln🛡️

patchstack.com/articles/cr...
January 10, 2025 at 1:21 PM
patchstack.com
Critical Vulnerabilities Found in Fancy Product Designer Plugin! 🚨

It suffers from Unauthenticated Arbitrary File Upload and SQL Injection vulnerabilities. ⛓️‍💥

No patch was released. 😔

As a paid Patchstack user you're protected from this vulnerability🛡️

patchstack.com/articles/cr...
Critical Vulnerabilities Found in Fancy Product Designer Plugin - Patchstack
Critical vulnerabilities discovered in the Fancy Product Designer plugin: unauthenticated arbitrary file upload and SQL injection. Stay protected with Patchstack.
patchstack.com
January 9, 2025 at 10:42 AM
patchstack.com
Advisory Alert: Critical Vulnerabilities Fixed in WPLMS and VibeBP! 🚨

Please update to versions 1.9.9.5.3 and 1.9.9.7.7. ⬆️

You are also protected from this vulnerability if you are a paid Patchstack user. 🛡️

patchstack.com/articles/mu...
Multiple Critical Vulnerabilities Patched in WPLMS and VibeBP Plugins - Patchstack
Multiple vulnerabilities patched in WPLMS and VibeBP plugins. Update to versions 1.9.9.5.3 and 1.9.9.7.7. Stay secure effortlessly with Patchstack’s protection.
patchstack.com
December 25, 2024 at 1:04 PM
patchstack.com
Imagine if your #WooCommerce store were hacked. It's a dreadful thought, we know, but it can happen. 😱

Don't panic, though. Lana has prepared a 10-step guide to help you restore your site. 💪

patchstack.com/articles/yo...
How to recover your site after a WooCommerce hack
Follow the 10-step process to identify the cause of the attack, clean up your WooCommerce store after a hack, and strengthen your security.
patchstack.com
December 18, 2024 at 3:00 PM
patchstack.com
Our researcher, Edouard, shares fascinating insights about the most exploited WordPress threats in Q4. 🕵️‍♂️

He also provides in-depth examples of how virtual patches work to protect against vulnerabilities. 💻

patchstack.com/articles/q4...
Virtual Patches vs. Hackers: Q4 2024’s Most Exploited WordPress Threats
Discover how virtual patches (vPatches) provide immediate security for WordPress sites, protecting against vulnerabilities in plugins and themes while awaiting official updates. Learn how to safeguard your website from cyber threats.
patchstack.com
December 18, 2024 at 11:00 AM
patchstack.com
🎅 revisited Patchstack HQ. He needs you to find more difficult vulns in #WordPress plugins and themes.

📅 When: 17-23 Dec
🛡️ What: SQLi, PHP Object Injection, Insecure Deserialization
📊 CVSS: 7.0+
📈 Installs: 50+
🎁 $4700 bounty pool

Learn more at patchstack.com/bug-bounty/
December 17, 2024 at 11:15 AM
patchstack.com
We released an advisory about Multiple Critical Vulnerabilities Patched in the Woffice Theme. 🔒

If you use it, update it to version 5.4.15+. ⬆️

You're also protected from this vuln if you are a paid Patchstack user. 💪

patchstack.com/articles/mu...
Multiple Critical Vulnerabilities Patched in Woffice Theme - Patchstack
Critical vulnerabilities in the Woffice WordPress theme have been patched in version 5.4.15. Update now to secure your site and learn how Patchstack keeps WordPress users protected.
patchstack.com
December 13, 2024 at 11:12 AM
patchstack.com
🎅 visited Patchstack and has a quest for you to find vulns in #WordPress plugins and themes.

📅 When: 10-17 Dec
🛡️ What: XSS, CSRF, Arbitrary file download, privilege escalation, or sensitive data exposure
📊 CVSS: 6.4+
📈 Installs: 50+

Learn more at patchstack.com/bug-bounty/
December 10, 2024 at 2:10 PM
patchstack.com
We just released an advisory about an unauthenticated Privilege Escalation Vulnerability #vulnerability in Sweet Date Theme 🚨

If you use it, update it to version 3.8.0+ if possible ⬆️

You're also protected from this vuln if you are a paid Patchstack user 💪

patchstack.com/articles/un...
Privilage Escalation Vulnerability Patched in Sweet Date Theme
Learn about the critical security vulnerabilities in the Sweet Date WordPress theme. Update to version 3.8.0 or higher to protect your site from unauthorized access and potential takeovers.
patchstack.com
December 6, 2024 at 10:14 AM
patchstack.com
We just released an advisory about an authenticated RCE #vulnerability in Rank Math SEO plugin 💻

If you use this plugin, please update it to version 1.0.232 or later. 🔧

You're also protected from this vuln if you are a paid Patchstack user. 🔒

Link in the comment below 👇
November 28, 2024 at 2:54 PM
patchstack.com
We just launched a Black Friday special #bounty event 🛒

📅 When: 26 Nov to 08 Dev
🛍️ What: WooCommerce and alternatives, payment gateways, and plugins extending eCommerce functionality
🔒 CVSS: 6.4+
📈 Installs: 50+ active installs

Learn more https://patchstack.com/bug-bounty/
November 26, 2024 at 11:26 AM
patchstack.com
We have just released an advisory about the Unauthenticated Arbitrary File Read Vulnerability in the Jobify Theme. 🔒

Unfortunately, this vulnerability is still unpatched. 😞

However, all paid Patchstack users are protected from this vuln. ✅

patchstack.com/articles/una...
Unauthenticated Arbitrary File Read Vulnerability in Jobify Theme - Patchstack
This blog post is about an unauthenticated arbitrary file read vulnerability on the Jobify theme. If you're a Jobify user, please delete or deactivate the theme until the patch is released by the vend...
patchstack.com
November 22, 2024 at 8:45 AM
Reposted by Patchstack
dariusfx.bsky.social
Does anyone want to spend Friday having lots of fun? Here's your chance - ctf.patchstack.com, #CTF challenge organized by @patchstack.com, but all challenges are made by the Patchstack Alliance community of #ethical #hackers, #security #researchers, and #developers 🤩 Of course, there are prizes! 🤑
Patchstack CTF
ctf.patchstack.com
November 22, 2024 at 8:26 AM
Reposted by Patchstack
maciekpalmowski.dev
Howdy 🤠

At High Noon (GMT) we're starting a Capture The Flag Event at @patchstack.com

In the bank, the sheriff holds some great prizes 💰 for the fastest hackers:

First place - $1000
Second place - $600
Third place - $400

To participate register at ctf.patchstack.com

Good luck 😊
November 22, 2024 at 8:26 AM
patchstack.com
We are proud sponsors of #WordCamp #Wroclaw 🇵🇱💪

Make sure to say "cześć" to @maciekpalmowski.dev. Catch his talk on security this Saturday, and snag some cool Patchstack swag while you're at it! 🛡️🎤

Do zobaczenia 🙂
November 21, 2024 at 11:13 AM
Reposted by Patchstack
maciekpalmowski.dev
Check out our latest interview with Hai Zhang from @litespeedtech.bsky.social 🎤

You've likely heard about the recent vulnerabilities in their #WordPress Plugin. 🔓

Hai dives into how they swiftly tackled these issues and the significance of joining an mVDP. 🚀

patchstack.com/articles/han...
Handling plugin security: Interview with LiteSpeed Cache's Hai Zhang - Patchstack
Today we present an interview with Hai Zheng. Hai works at LiteSpeed Technologies and is a man who chases better code and products tirelessly, so before he knew it, he just happened to learn PHP, JS, ...
patchstack.com
November 20, 2024 at 2:41 PM