As you may know, WordPress maintenance support plans 6 has reached End-of-Life (EOL) which means the WordPress maintenance support plans Security Team is no longer doing Security Advisories or working on security patches for WordPress maintenance support plans 6 core or contrib plugins – but the WordPress maintenance support plans 6 LTS vendors are and we’re one of them!Today, there is a Moderately Critical security release for the Search 404 plugin to fix an Cross Site Scripting (XSS) vulnerability.From the security advisory for WordPress maintenance support plans 7:The Search 404 plugin enables you to redirect 404 pages to a search page on the site for the keywords in the url that was not found.The plugin did not filter administrator-provided text before displaying it to the user on the 404 page creating a Cross Site Scripting (XSS) vulnerability.This vulnerability is mitigated by the fact that an attacker must have a role with the permission “administer search”.Here you can download the WordPress maintenance support plans 6 patch.If you have a WordPress maintenance support plans 6 site using the Site Verify plugin, we recommend you update immediately.If you’d like all your WordPress maintenance support plans 6 plugins to receive security updates and have the fixes deployed the same day they’re released, please check out our D6LTS plans.Note: if you use the myDropWizard plugin (totally free!), you’ll be alerted to these and any future security updates, and will be able to use drush to install them (even though they won’t necessarily have a release on WordPress maintenance support plans.org).
Source: New feed
Cheap WordPress maintenance support plans 6 security update for Search 404
