Archive for Inside WordPress – Page 4

NextGEN Gallery Plugin – Security Alert!

By Trevor Current
Monday, February 27th, 2017

SUCURI, a leading WordPress security company, announced their finding of an SQL injection vulnerability in the popular NextGEN Gallery plugin.

This vulnerability can be exploited by attackers in at least two different scenarios:

1. If you use a NextGEN Basic TagCloud Gallery on your site.

2. If you allow your users to submit posts to be reviewed (contributors).

If you fit into any of these two cases, you’re definitely at risk.

This issue existed because NextGEN Gallery allowed improperly sanitized user input in a WordPress prepared SQL query; which is basically the same as adding user input inside a raw SQL query. Using this attack vector, an attacker could leak hashed passwords and WordPress secret keys in certain configurations.

SUCURI advises updating to the latest version of the NextGEN Gallery plugin now.

You can read more about the SQL injection vulnerability on the SUCURI Blog.

 

 

At Current Photographer we take security very seriously. With our Managed WordPress Hosting, we make sure that our client’s websites are backed up daily, and protected with multiple firewalls throughout our enterprise-grade infrastructure. Our real-time security threat detection, and security audits and code reviews help to keep client’s sites safe. Should a website become compromised, we will immediately take action to find the exploit, remove the malicious code, and have the site back up and running in no time.

Categories : Inside WordPress, Plugins

WordPress 4.7.2 Security Release

By Trevor Current
Friday, January 27th, 2017

WordPress issued a security release, version 4.7.2, and is now available for update.

This update addresses three security issues;

  1. The user interface for assigning taxonomy terms in Press This is shown to users who do not have permissions to use it.
  2. WP_Query is vulnerable to a SQL injection (SQLi) when passing unsafe data. WordPress core is not directly vulnerable to this issue, but we’ve added hardening to prevent plugins and themes from accidentally causing a vulnerability.
  3. A cross-site scripting (XSS) vulnerability was discovered in the posts list table.

You can download this latest version from WordPress.org or update your existing install by going to your Dashboard > Updates, and clicking the link to update.

You can learn more about this security release here.

 

 

Since Current Photographer provides Managed WordPress Hosting, our clients don’t have to worry about upgrading their websites to version 4.7.2, because we take care of that for them. We backup the website files and database, run the core update, and then confirm the website is loading properly before going live. If we detect a problem, we’ll automatically roll it back to the state it was prior to the update and inform our clients of the issue. Automatic WordPress core updates is just one of the great features you get with our Hosting and Support plans.

Categories : Inside WordPress, Security

Ninja Forms Plugin – Security Alert!

By Trevor Current
Wednesday, August 17th, 2016

WP-Security-Alert-Ninja-FormsSUCURI, a leading WordPress security company, announced their finding of an SQL injection vulnerability in the popular Ninja Forms plugin.

The Ninja Forms plugin is installed on over 600,000 WordPress websites, and SUCURI is giving this a risk rating of Dangerous and should be updated to version 2.9.55.2 (or later) which fixes the vulnerability.  Read More→

Categories : Inside WordPress, Plugins, Security

WordPress 4.6 is Available for Download

By Trevor Current
Wednesday, August 17th, 2016

WP-4-6-300x300Code name “Pepper” in honor of the jazz baritone saxophonist Park Frederick “Pepper” Adams III, WordPress version 4.6 is now available for download or update in the WP Admin.

The new features of 4.6 were designed to “help you to focus on the important things while feeling more at home”. For example, the Streamlined Updates feature keeps you on the same page while updating, installing, and deleting plugins and themes. The Admin Dashboard now uses the Native Fonts that you have on your computer rather than loading web fonts from the internet. This makes for faster Admin page load speeds which are always welcomed 😉  Read More→

Categories : Inside WordPress

WooCommerce 2.6.4 – Plugin Update

By Trevor Current
Tuesday, July 26th, 2016

WC-Plugin-Update-300x300The WooCommerce team just announced version 2.6.4 of their plugin is available for download from WordPress.org or as an automatic update in the WP Admin.

This release squashes some bugs and addresses a few security issues, so if you’re using WooCommerce, be sure to backup your website files and database before running the update. You can learn more about the release here.

If you’re not familiar with WooCommerce, it’s probably the most popular e-commerce plugin for WordPress used today and has over 1 million installs. The base plugin is incredibly powerful out of the gate and gives you a ton of features to sell your products and services. Because of its extensibility and dedicated community of developers, there are a huge number of free and paid add-ons that you can install for even more features and functionality.  Read More→

Categories : Inside WordPress, Plugins

Photocrati Acquires the NextGEN Gallery WordPress Plugin

By Trevor Current
Wednesday, June 20th, 2012

If you’re not familiar with Photocrati, they make one of the most popular WordPress themes for photographers. With over 60 styles to choose from right out of the box, you’re sure to find a look to fit your design taste and get a website up and running quickly. The team at Photocrati are photographers themselves so they know what the community wants. They have over 12,000 photographers using their theme to power websites and online galleries.

After 6 months of work, Photocrati is happy to announce the acquisition of the NextGEN Gallery WordPress plugin. NextGEN is one of the most popular gallery management plugins for WordPress and has been downloaded over 5 million times. Photocrati is working to combine the best of their theme and NextGEN into one powerful solution for photographers.

NextGEN will act as the underlying engine for gallery management in version 5.0 of the Photocrati theme. This will give users a lot of new functionality including, centralized gallery management, custom cropping of thumbnails, and watermarking of images. Photocrati-style functionality will be applied to NextGEN giving you the ability to display galleries using Photocrati slideshow, thumbnail, filmstrip, blog-style and e-commerce style displays.

Photocrati has been working on the integration of NextGEN into their theme for months but have not yet announced a release date. They plan to move into the testing stage mid-summer and are looking for beta testers.

For more information about Photocrati’s acquisition of NextGEN Gallery and to become a beta tester, please give their website a visit.

–

Categories : Inside WordPress, Plugins
Tags : , , , ,
« Previous Page