This is a weekly series where you can get caught up on recent events relevant to open source security, with an initial focus on WordPress security.
This series is brought to you by Patchstack and your host Robert. I look forward to helping keep you regularly up to date on open source security issues here at the Patchstack weekly Update.
Welcome back to the Patchstack Weekly Security Update! This update is for week 4 of 2022. In this week’s session, I will share a few high-risk vulnerabilities that were patched this week and provide an update on details about the un-patched WordPress theme vulnerabilities that Patchstack continues to deal with. During this week’s knowledge share…
Welcome back to the Patchstack Weekly security update. It is the third week of 2022 and this episode is called WordPress vulnerabilities & Cross-Site Request Forgery. Within this session, I will inform you of 6 popular open-source WordPress components that have patched various vulnerabilities in their code, from information disclosure to cross-site scripting and cross-site…
Welcome back to the Patchstack Weekly security update! This is Episode 6. In this week’s session, we will cover a WordPress plugin that patched a critical authenticated remote code execution bug. As well as big disclosure by the Patchstack Red Team, which identifies dozens of themes that shared the same vulnerable code between them and…
Welcome to the Patchstack Weekly security update! This is the first Patchstack update for 2022, happy new year and let’s get into the security news. This week I will give a quick roundup detailing the number of vulnerabilities added to the Patchstack database last month and I will give an update on the backlog of…
Welcome back to the Patchstack Weekly security update! This update is for week 52 of 2021. This week marks the final week of 2021, and with the year coming to a close it is a great time to reflect on the past, present, and future. So that is the format of this week’s update. this…
Welcome back to the Patchstack Weekly security update! This update is for week 51 of 2021. This week’s news may sound like deja-vu, as I will cover more of the same topics as I did last week. Log4j is still a leading security concern, and the project’s developers have released yet another security update, this…
Welcome to the Patchstack Weekly security update! This update is for week 50 of 2021. It is mid-December, and we are still waiting to see the total impact of a vulnerability reported in the open-source component: log4j. This is a library used in a large number of java applications and I will get the details…
Welcome to the Patchstack Weekly security update, this update is for December 9th, 2021. We will talk about the Gravatar breach, web history, and vulnerabilities from this week. In this week’s session, we have two high-risk vulnerabilities to report in WordPress plugins and I will talk about the Gravatar email leaks, one-way encryption, and how…
