Lana Codes

WordPress theme and plugin development

[Wordfence @wordfence]

On May 21st, we identified an Insufficient Authorization to Privilege Escalation via MCP (Model Context Protocol) vulnerability in AI Engine, a plugin with > 100,000 active installations.

We urge updating to the latest patched version (2.8.4) asap.

https://t.co/DyQbrr7mzM

[Wordfence @wordfence]

The 2024 Annual WordPress Security Report - Another Record Year In Disclosed Vulnerabilities. The Wordfence team breaks down the most important security trends you should know about. #wordpress #wordpresssecurity https://t.co/3Ed4FNw2HG

[Wordfence @wordfence]

4M WP Sites Using Really Simple Security Free and Pro Versions Affected by Critical Authentication Bypass Vulnerability. WP plugin team has pushed forced update. Pro versions also affected and may not update if license is expired. Update to v9.1.2 now. https://t.co/vslfMvrBXF

[Lana Codes @LanaCodes]

Feather Login Page by Feather Plugins #WordPress plugin was affected by a Privilege Escalation #vulnerability.

Detailed analysis, description:
https://t.co/cXqfckCCbm

[Wordfence @wordfence]

Exciting news! We've launched a webhook integration for vulnerabilities with Wordfence Intelligence for FREE. Stay updated with real-time notifications of the latest WordPress vulnerabilities! #WordfenceIntelligence #WordPressSecurity
https://t.co/c2i8lSxWxU

[Lana Codes @LanaCodes]

User Registration by WPEverest #WordPress plugin was affected by an Arbitrary File Upload #vulnerability.

Detailed analysis, description and #exploit script:
https://t.co/kyr7XTVBce

[Lana Codes @LanaCodes]

BookIt by StylemixThemes #WordPress plugin was affected by an Authentication Bypass #vulnerability.

Detailed analysis, description and #exploit script:
https://t.co/W3l1bJEwWw

[Lana Codes @LanaCodes]

Follow us on Telegram: https://t.co/GaIhCelnKW

[Lana Codes @LanaCodes]

Social Login and Register by miniOrange #WordPress plugin was affected by an Authentication Bypass #vulnerability.

Detailed analysis, description and #exploit script:
https://t.co/5XYrJcfVZU

[Lana Codes @LanaCodes]

WCFM – WooCommerce Multivendor Membership by WC Lovers #WordPress plugin was affected by a Privilege Escalation #vulnerability.

Detailed analysis, description and #exploit script:
https://t.co/H7rxCi4AR4

[Lana Codes @LanaCodes]

WP User Switch by IqbalRony #WordPress plugin was affected by an Auth Bypass #vulnerability.

Detailed analysis, description and #exploit script:
https://t.co/1FVIIqVz6g

[Lana Codes @LanaCodes]

ReviewX by WPDeveloper #WordPress plugin was affected by a Privilege Escalation #vulnerability.

Detailed analysis, description and #exploit script:
https://t.co/66D2hN3dSS

[Lana Codes @LanaCodes]

@Random_Robbie @wordfence You can find the detailed analysis about the vulnerability here: https://t.co/1FVIIqV1gI

I usually try to make a publication about every auth bypass vulnerability. However, sometimes this takes time, especially if I also have to make a demo.

[Lana Codes @LanaCodes]

BuddyPress Social Connect by VibeThemes #WordPress plugin was affected by an Auth Bypass #vulnerability.

Detailed analysis, description and #exploit script:
https://t.co/SKuHKAENTn

[Lana Codes @LanaCodes]

OTP Login/Signup Woocommerce by XootiX #WordPress plugin was affected by an Auth Bypass #vulnerability.

Detailed analysis, description and #exploit script:
https://t.co/40zZWyhcoN

[Lana Codes @LanaCodes]

https://t.co/iyvOCw3MHg

[Lana Codes @LanaCodes]

Profile Builder by Cozmoslabs #WordPress plugin was affected by an Auth Bypass #vulnerability.

Detailed analysis, description and #exploit script:
https://t.co/gJTgNiWxo6

[Lana Codes @LanaCodes]

Lana Login with #Telegram Passport for #WordPress
Buy it for $9

https://t.co/8ebSnpmCdH

[Lana Codes @LanaCodes]

User Verification by PickPlugins #WordPress plugin was affected by an Auth Bypass #vulnerability.

Detailed analysis, description and #exploit script:
https://t.co/pIlpuNwsN4

[Lana Codes @LanaCodes]

Lana Two Factor with #Telegram for #WordPress
Buy it for $9

https://t.co/7j0TDgCRuw