-
WordPress Password Leak Protection in CleanTalk Plugin
Leaked passwords are one of the fastest-growing threats to WordPress. WordPress password leak protection helps block attackers who reuse stolen credentials from massive breaches.Security by CleanTalk now gives you a way to stop them before they log in. What’s New: WordPress Password Leak Protection Password Leak Protection automatically checks user credentials against public breach databases.
FEEDBACK LOG
The Latest
-
Our client’s review: TAILORMADEAFRICA.COM
We continue sharing our clients’ reviews and today’s one is kindly brought to you by our client from tailormadeafrica.com on WordPress. Makes such a huge difference! Since we’ve been using Cleantalk our spam form completions have disappeared! Thank you Cleantalk!Update: We are still using CleanTalk and it has made such a huge difference to the…
-
Plugin Security Certification: “FileBird” – Version 5.5: Secure Media Library Management
·
In the world of WordPress media library management, one aspect that should never be overlooked is security. The “FileBird” plugin, specifically version 5.5, is not only a powerhouse in organizing your media library but also a guardian of your website’s security. In this article, we delve into how this plugin goes above and beyond in…
-
We Have Reset 178 Passwords That Might Have Been Compromised
While monitoring exposed password databases we found a leaked database that contained 178 compromised credentials of CleanTalk users among other data. These emails/passwords were compromised some time ago and after that were used to create a CleanTalk account by their owners. As soon as we found this potential vulnerability – we immediately reset passwords for…
-
CVE-2023-4795 – Testimonial Slider Shortcode < 1.1.9 - Contributor+ Stored XSS
While evaluating the plugin, we uncovered a vulnerability that permits the execution of Stored Cross-Site Scripting (XSS) on behalf of a contributor. This vulnerability is exploited by inserting a shortcode into a newly created post, potentially resulting in an account takeover. Main info: CVE CVE-2023-4795 Plugin Testimonial Slider Shortcode Critical High Publicly Published September 25,…
