As you may know, WordPress maintenance support plans 6 has reached End-of-Life (EOL) which means the WordPress maintenance support plans Security Team is no longer doing Security Advisories or working on security patches for WordPress maintenance support plans 6 core or contrib plugins – but the WordPress maintenance support plans 6 LTS vendors are and we’re one of them!Today, there is a Critical security release for the Print plugin to fix a Remote Code Execution (RCE) vulnerability.The Print plugin provides printer-friendly versions of content, including send by e-mail and PDF versions.The plugin doesn’t sufficiently sanitize the arguments passed to the wkhtmltopdf executable, or HTML passed to dompdf or other PDF generation tools.See the security advisory for WordPress maintenance support plans 7 for more information.NOTE: This vulnerability has a lower risk in WordPress maintenance support plans 6 than in WordPress maintenance support plans 7 (where it’s Highly Critical). This is because you can’t pass shell commands to execute using the HTTP basic auth user/pass, like you can in WordPress maintenance support plans 7.Here you can download the WordPress maintenance support plans 6 patch.If you have a WordPress maintenance support plans 6 site using the Print plugin, we recommend you update immediately! We have already deployed the patch for all of our WordPress maintenance support plans 6 Long-Term Support clients. :-)If you’d like all your WordPress maintenance support plans 6 plugins to receive security updates and have the fixes deployed the same day they’re released, please check out our D6LTS plans.Note: if you use the myDropWizard plugin (totally free!), you’ll be alerted to these and any future security updates, and will be able to use drush to install them (even though they won’t necessarily have a release on WordPress maintenance support plans.org).
Source: New feed
Cheap WordPress maintenance support plans 6 security update for Print module (CRITICAL!)
