‪(859) 354-4348‬

darrell@jordanwebsolutions.com

Book a call!

August WordPress Updates

Aug 21, 2019 | Blog, WordPress Maintenance

August WordPress Updates

August WordPress Updates

iThemes Security, one of the leading WordPress Security plugins, publishes a list of WordPress vulnerabilities reported by the WordPress community. If you have any of these plugins or themes, you will want to login to your WordPress admin panel and go to plugins and update to the latest version to patch the vulnerability.

Core WordPress

No vulnerabilities found

Plugins

  1. WP Fastest Cache – Version 0.8.9.5 and below is vulnerable to a Directory Traversal attack. The vulnerability has been patched, and you should update to version 0.8.9.6.
  2. Popup Builder – Version 3.44 and below is vulnerable to a SQL Injection. The vulnerability has been patched, and you should update to version 3.45.
  3. Email Subscribers & Newsletters – Version 4.1.6 and below is vulnerable to a Cross-Site. The vulnerability has been patched, and you should update to version 4.1.7.
  4. Ultimate Member – Version 2.0.53 and below is vulnerable to a Cross-Site Scripting attack. The vulnerability has been patched, and you should update to version 2.0.53.
  5. Woody Ad Snippets – Version 2.2.4 and below is vulnerable to an unauthenticated options import and stored XSS issues that could lead to Remote Code Execution exploit. The vulnerability has been patched, and you should update to version 2.2.5.
  6. Give – Version 2.5.0 and below is vulnerable to a SQL Injection. The vulnerability has been patched, and you should update to version 2.5.1.
  7. Login or Logout Menu Item – Version 1.1.1 and below is vulnerable to an Unauthenticated Options Change. The exploit would allow an attacker to change the link to the login URL and redirect users to a fake login form. After a user filled the malicious login form, the attacker would have their credentials to access your site. The vulnerability has been patched, and you should update to version 1.2.0.
  8. CformsII – Version 15.0.1 and below is vulnerable to a Cross-Site Request Forgery and HTML Injection attack. The vulnerability has been patched, and you should update to version 15.0.2.
  9. PPOM for WooCommerce – Versions 18.3 and below is vulnerable to an Authenticated Stored XSS attack. The vulnerability has been patched, and you should update to version 18.4.
  10. 301 Redirects Addon Bulk Uploader – Version 1.2.4 and below is vulnerable to an Unauthenticated Options Change. The exploit allows an unauthenticated user to redirect all pages to a malicious site. The vulnerability has been patched, and you should update to version 1.2.5.
  11. ND Donations – Version 1.3 and below is vulnerable to an Unauthenticated Options Change. The exploit allows an unauthenticated user to adjust several WordPress settings. This would allow the attacker to create a new user and then change the user role to Admin. The vulnerability has been patched, and you should update to version 1.3.1.
  12. ND Booking – Version 2.4 and below is vulnerable to an Unauthenticated Options Change. The exploit allows an unauthenticated user to adjust a number of WordPress settings and enable the attacker to create a new user and then change the user role to Admin. The vulnerability has been patched, and you should update to version 2.4.2.
  13. ND Learning Courses – Version 4.7 and below is vulnerable to an Unauthenticated Options Change. The exploit allows an unauthenticated user to adjust several WordPress settings and would enable the attacker to create a new user and then change the user role to Admin. The vulnerability has been patched, and you should update to version 4.8.
  14. JoomSport – Version 3.3 and below is vulnerable to a SQL Injection. The vulnerability has been patched, and you should update to version 3.4.

Themes

Real Estate 7 – Versions 2.9.0 and below is vulnerable to a Stored XSS Injection that allows an attacker to inject JavaScript and HTML on the front end of a site. The vulnerability has not been patched. Remove the theme until an update with a patch is released.

Weekly Updates

You need to make logging into your WordPress admin site at least once a week to ensure all of your files are updated to the latest version. Outdated code is the No.1 reason sites get hacked.
If you are not comfortable with running these updates, then feel free to reach out to us, and we can work with you to make sure your site is backed up regularly and up to date on all of your code.
Also, if you want to get these updates when they are published, fill out the form below and you will receive an email anytime we publish an update.

  • They put out the product I had in my mind which is never easy to do. Would recommend this company to anyone as Darrell was easy to communicate with and put a lot of effort into his work. I could not be happier!

    Rich Hardin

  • Jordan Web Solutions has been nothing short of exceptional! As the Garrard County Chamber of Commerce, we had the pleasure of working with Jordan Web Solutions to design, maintain, and keep our new website updated. The attention to detail, creativity, and professionalism made the entire process seamless and enjoyable.
    In addition to delivering a user-friendly and visually appealing website, Jordan transferred and converted everything from our old website, which was handled in-house and difficult for us to keep current. This transition was managed flawlessly, allowing us to focus on our core activities without any worries.
    We can't recommend Jordan Web Solutions enough to anyone looking for top-notch web design and management services. If you're in need of a reliable partner to take your online presence to the next level, look no further. Reach out to Jordan Web Solutions—you won't be disappointed!

    Diane Bisher

  • Very easy process working with Jordan Web Solutions. Excellent customer service, very quick with communication. They made my website so much better than it was before.

    Melissa Woolums

  • Darrell has been great to work with. Web design is definitely not my wheelhouse and Darrell is able to walk me through all of the nuances of running a productive website. His expertise and insights have been very beneficial.

    Kevin Minke

  • Darrell Jordan has been helping me build my website for a couple of years now, and I am thrilled and grateful for his excellent communication, expertise and ideas, adaptability, and responsiveness! You cannot go wrong working with Jordan Web Solutions; he will quickly take your website to the next level!

    Joel Katte

  • Darrell was ALWAYS available! He was so helpful in answering all my questions and ensuring I understood all the steps I needed to take to create the most professional and appealing website for my Firm. I really liked that, because of his experience and expertise, he was able to give me advice on what may or may not be the best/most appropriate information to add, pictures, etc. The level of professionalism and his knowledge of all things IT gives me assurance I can always reach out to him for any IT solution, and you don't have to wait weeks for a response.

    Whitney Pinkney

  • I was most impressed that Darrell was able to take the pages from my website and get them to a point where we could take the next step to refine the pages to my ideas. I was very happy with his response to my suggestions and requests on various components of the page; images, text, etc.

    After updating my site, he took some time to show me how to do my own editing and use the tools he put into place. Kudos, Mr. Jordan!

    Michael Beall

  • Jordan Web Solutions does a fantastic job of not only illustrating content, but also making sure to use phrases and words that will get your site to pop up in search engines. Professional, knowledgable, and quick. I would recommend them to anyone.

    David Kibler

  • Darrell listened to what I wanted and designed the web site accordingly. He worked with us making changes as the site developed. He also had good suggestions and provided the instruction I needed.

    Rick Mordoff

  • Darrell was extremely creative, he had a lot of ideas for my website, which was fantastic because I didn't really know what was possible, or what exactly I wanted. He filled in a lot of gaps! He was also extremely patient with me, since I am not as tech savvy as some. I would definitely work with him again!

    AJ Mortara

7 Questions for Your 6 Month Website Checkup

7 Questions for Your 6 Month Website Checkup

Sep 10, 2026 |

Running a digital presence without routine maintenance is like driving a car without ever changing the oil: everything seems fine until a broken link, an outdated logo, or an old phone number quietly stalls your growth. Your online footprint is often the very first...