WordPress Updates

[Sushubh]

Supply Chain Attack on WordPress.org Plugins Leads to 5 Maliciously Compromised WordPress Plugins

On Monday June 24th, 2024 the Wordfence Threat Intelligence team became aware of a plugin, Social Warfare, that was injected with malicious code on June 22, 2024 based on a forum post by the WordPress.org Plugin Review team. We immediately checked the malicious file and uploaded it to our...

www.wordfence.com

 

[Navjot Singh]

This seems to be happening a lot recently.

 

[Sushubh]

Glad to be not using wordpress anymore!

 

[Sushubh]

Clearer Writing at Your Fingertips: Introducing Write Brief with AI (Beta)

From the team at Jetpack AI comes a new tool that will improve your writing in a flash.

wordpress.com

 

[Sushubh]

Litespeed Cache bug exposes millions of WordPress sites to takeover attacks

Critical Privilege Escalation in LiteSpeed Cache Plugin - Patchstack

There is a critical vulnerability in the LiteSpeed Cache plugin - Unauth Privilege Escalation in < 6.4 affecting 5+ millions of sites.

patchstack.com

Changeset 3135111 – WordPress Plugin Repository

plugins.trac.wordpress.org

NVD - CVE-2024-28000

nvd.nist.gov

 

[Navjot Singh]

Tch tch. Didn't expect this from Litespeed.

 

---

[Sushubh]

WordPress.org denies service to WP Engine

That escalated quickly

www.theregister.com

 

[Sushubh]

He is doubling down.


Source

 

[Navjot Singh]

WP Engine is not WordPress

It has to be said and repeated: WP Engine is not WordPress. My own mother was confused and thought WP Engine was an official thing. Their branding, marketing, advertising, and entire promise to cus…

wordpress.org

WP Engine is banned from WordPress.org

Pending their legal claims and litigation against WordPress.org, WP Engine no longer has free access to WordPress.org’s resources.

wordpress.org

His meltdown is going to cost millions in profits. Seeing people on Reddit with over 100 sites both at WP Engine and WVIP thinking about whether to shift the platform/host or not. Even ex-Automattic staff is talking about his shit behavior and the culture at the company. lol

 

[Navjot Singh]

Source

Perfectly timed.