This is a weekly series where you can get caught up on recent events relevant to open source security, with an initial focus on WordPress security.
This series is brought to you by Patchstack and your host Robert. I look forward to helping keep you regularly up to date on open source security issues here at the Patchstack weekly Update.
Welcome back to the Patchstack Weekly security update! This update is for week 20 of 2022. This week I will talk about the importance of communication and how to communicate security when it comes to security issues. Starting from developers needing to communicate security bugs being patched and ending with how Patchstack partners are experiencing…
Welcome back to the Patchstack Weekly security update! This update is for week 19 of 2022 and is about secure AJAX endpoints and WordPress vulnerabilities. This week in vulnerability news, I will share two WordPress plugins with security bugs that have no patch available. One could lead to tricking logged-in users to run arbitrary code…
Welcome back to the Patchstack Weekly Security Update! This update is for week 18 of 2022. This week I will talk about an obscure vulnerability, something that is commonly overlooked and missed by developers, bug bounty hunters, and security researchers alike. PHP Object Injection, also known as Insecure Unserialize. I will get started with this…
Welcome back to the Patchstack Weekly security update! This update is for week 17 of 2022. This week I have a handful of vulnerabilities to share with you. Including 3 unauthenticated SQL injection security bugs that were patched, and 3 security bugs that could lead to files being uploaded to websites running these affected plugins….
Welcome back to the Patchstack Weekly security update! This update is for week 16 of 2022 and is about the power of transparency in open source, and how anyone can utilize this transparency to learn secure code review. This week I will talk about the power of transparency in open source as it pertains to…
Welcome back to the Patchstack Weekly Security Update! This update is for week 15 of 2022 and will talk about WordPress security history. This week is a special episode. There were not many critical vulnerabilities to cover this week. So I will skip the vulnerability news and share with you, a lesson about WordPress security…
Welcome back to the Patchstack Weekly security update! This update is for week 14 of 2022 and I will talk about the first 5 steps to a secure WordPress. This week has a lot of vulnerability news to cover, and I will be sharing it as a 3-2-1 punch of 3 plugins that received no…
Welcome back to the Patchstack Weekly security update! This update is for week 13 of 2022. This week, I will talk about two high-risk vulnerabilities in two WordPress plugins with one big difference: One was patched, one was not. In this week’s knowledge share I will share some new WP-CLI Security commands that were just…
Welcome back to the Patchstack Weekly Security Update! This update is for week 12 of 2022. This week in WordPress-related vulnerabilities, I will talk about 3 plugins that have each been patched due to high-risk security bugs found in their code. I will also provide an update on the insecure Freemius library situation, and share…
Welcome back to the Patchstack Weekly security update! This update is for week 11 of 2022. This week is all about plugin vulnerabilities and the State of WordPress Security 2021 whitepaper. There is some big news this week, but really I should say last week. Patchstack released our State of WordPress Security Whitepaper for 2021…
Welcome back to the Patchstack Weekly Security Update! This update is for week 9 of 2022 it is the beginning of March. In this week I will cover a few high-risk vulnerabilities found in WordPress components, give an update on the insecure old Freemius library situation and discuss last month’s additions to the Patchstack database.
Welcome back to the Patchstack Weekly security update! This update is for week 8 of 2022 and focuses on insecure libraries. This week has been a heavy news week for the world, and open-source, specifically WordPress security concerns were no exception. There are 5 plugins that have released patches for serious vulnerabilities this week, as…
Welcome back to the Patchstack Weekly security update! This update is for week 8 of 2022 and will dive into several vulnerabilities and talk about vulnerability risks. This week’s vulnerability news will have a lot to cover. One WordPress plugin had a vulnerability so severe the WP.org team initiated an auto-update for all installations. Another…
Welcome back to the Patchstack Weekly security update! This update is for week 6 of 2022. Last week, two high severity vulnerabilities were patched by the developers of WP Spell Check and Revolut Gateway for WooCommerce. Both of these plugins patched unauthenticated SQL injection vulnerabilities, so that will be the topic of this week’s knowledge…
Welcome back to the Patchstack Weekly security update! It is the beginning of February and this update is for the fifth week of 2022. This week I will share some of the core principles of open-source software development and how security researchers participate in them, as well explaining why open source projects should always have…
