Automattic

Critical Security Flaw in the WooCommerce Payments plugin

On March 22, 2023, a significant security flaw was identified in the WooCommerce Payments plugin, a widely used eCommerce payment plugin for WordPress with over 500,000 active installations. Fortunately, white hat security researcher Michael Mazzolini discovered the vulnerability and responsibly disclosed it through HackerOne, allowing websites to install the patched version 5.6.2 before the full …

Critical Security Flaw in the WooCommerce Payments plugin Read More »

How to scan your WordPress instances for Security Issues using WPScan

WordPress is a free, open-source web development platform. WordPress is a content management system (CMS) created in PHP and primarily uses MySQL or MariaDB databases. This is a more technical blog post. WordPress is today’s most user-friendly and powerful blogging, content management, e-commerce, and website builder. A Sneak-peek on WPScan The WPScan security scanner was developed …

How to scan your WordPress instances for Security Issues using WPScan Read More »

XSS in popular WooCommerce Product Vendors plugin

  The popular WooCommerce WordPress plugin, used by 28 percent of all online stores, was just patched against a reflected cross-site scripting vulnerability (XSS). The vulnerability was found by the company SiteLock. The plugin vulnerability was disclosed to Automattic, the owner of, via its HackerOne security bounty program. The fix for the vulnerability was released on July …

XSS in popular WooCommerce Product Vendors plugin Read More »