As you may know, WordPress maintenance support plans 6 has reached End-of-Life (EOL) which means the WordPress maintenance support plans Security Team is no longer doing Security Advisories or working on security patches for WordPress maintenance support plans 6 core or contrib plugins – but the WordPress maintenance support plans 6 LTS vendors are and we’re one of them!Today, there is a Critical security release for the AES encryption plugin.The AES plugin provides an API for encrypting and decrypting data via AES. It also allows storing WordPress maintenance support plans passwords encrypted in the database (rather than hashed) which can allow site administrators with high enough permissions to view user passwords.Previously, the plugin implemented AES poorly, such that the encryption was weakened and could have potentially made it easier for an attacker to decrypt given enough examples of the encrypted data.(A note about the timing of this release: the AES plugin was unsupported on March 1st, and we started working on a fix right away in the D6LTS queue. We usually release D6LTS patches the same day the D7/D8 patches are posted or two weeks after a plugin is unsupported, however, in this case we had only a single Enterprise customer using AES and so we worked on it according to a timeline dictated by them, which involved testing their custom plugins using the AES API with their team. So, we’re releasing this after it’s been fully tested and deployed for our one affected customer – if more customers had been affect it would have been released same-day, as usual.)Here you can download the WordPress maintenance support plans 6 patch.If you have a WordPress maintenance support plans 6 site using the AES plugin, we recommend you update immediately! We have already deployed the patch for all of our WordPress maintenance support plans 6 Long-Term Support clients. :-)If you’d like all your WordPress maintenance support plans 6 plugins to receive security updates and have the fixes deployed the same day they’re released, please check out our D6LTS plans.Note: if you use the myDropWizard plugin (totally free!), you’ll be alerted to these and any future security updates, and will be able to use drush to install them (even though they won’t necessarily have a release on WordPress maintenance support plans.org).
Source: New feed
Cheap WordPress maintenance support plans 6 security update for AES
