WooCommerce Vulnerability Fixed - Update to 2.3.6 Now - HostAsean.com

Our Blog

Latest news and updates from HostAsean

WooCommerce Vulnerability Fixed – Update to 2.3.6 Now

Posted by Mr WordPress in HostAsean News, Website Security, WordPress 0 Comments

WooCommerce Vulnerability Fixed - Update to 2.3.6 Now

The WordFence blog has discovered a small vulnerability in WooCommerce 2.3.5, the latest version until today’s new release.

This WooCommerce vulnerability potentially allows an attacker to exploit an SQL Injection attack and run their own code on your site, however as the exploit is in the admin area, it is limited to those that have or can obtain Admin or Shop Manager access levels to your WordPress admin panel.

Our recommendation is to upgrade right away to version 2.3.6 which was released within hours of the vulnerability being found.

 

More information from the WordFence site:
http://www.wordfence.com/blog/2015/03/woocommerce-sql-injection-vulnerability/

You can download the new 2.3.6 version of WooCommerce released on March 13th 2015 at http://www.woothemes.com/woocommerce/.

 

Need more? Read about the 3 best WordPress security plugins and more ways to improve your website security.

Mr WordPress
Mr WordPress
WordPress Mechanic at Host Asean Ltd.
We use WordPress every day, and so do many of our customers. We post tips, tricks and WordPress guides on the HostAsean blog to help you put together your own powerful WordPress based website. Subscribe for the latest updates or check back regularly.

Leave a Reply

Your email address will not be published.

HostAsean.com
Website Hosting in Cambodia
sales@hostasean.com