Ike.ninja

Following an action-packed December, 2020 is off to a fine start with some new releases and announcements. Read on to find out what happened in the WordPress project in January. Release of Gutenberg 7.2 & 7.3 Gutenberg 7.2, the first Gutenberg release of 2020, was deployed on January 8th and included over 180 pull requests […]

We have begun offering SolusVM Master Enterprise licenses to Direct Store customers through the cPanel Store as an option for hypervisor users who wish to utilize the virtualization management software. SolusVM licenses are a new option to purchase, but aren’t a required installation or upgrade. If you’re interested in a control panel for a virtualized environment, read on to find out more. What is SolusVM? SolusVM is a GUI and API based VPS management system with support for platform virtualization tools such as 

• Project: Joomla!
• SubProject: CMS
• Impact: High
• Severity: Low
• Versions: 3.9.0-3.9.14
• Exploit type: XSS
• Reported Date: 2019-December-25
• Fixed Date: 2020-January-28
• CVE Number: CVE-2020-xxxxx

Description

Inadequate escaping of usernames allow XSS attacks in com_actionlogs.

Affected Installs

Joomla! CMS versions 3.9.0 – 3.9.14

Solution

Upgrade to version 3.9.15

Contact

The JSST at the Joomla! Security Centre.

• Project: Joomla!
• SubProject: CMS
• Impact: Moderate
• Severity: Low
• Versions: 3.0.0-3.9.14
• Exploit type: CSRF
• Reported Date: 2019-December-23
• Fixed Date: 2020-January-28
• CVE Number: CVE-2020-8419

Description

Missing token checks in the batch actions of various components causes CSRF vulnerabilities.

Affected Installs

Joomla! CMS versions 3.0.0 – 3.9.14

Solution

Upgrade to version 3.9.15

Contact

The JSST at the Joomla! Security Centre.

Two members of the WordPress leadership team were nominated for excellent work in their field in the first ever Community Industry Awards. Andrea Middleton is nominated for Executive Leader of a Community Team and Josepha Haden Chomphosy is nominated for Community Professional of the Year. CMX is one of the largest professional organizations dedicated to […]

As 2019 draws to a close and we look ahead to another exciting year let’s take a moment to review what the WordPress community achieved in December. WordPress 5.3.1 and 5.3.2 Releases The WordPress 5.3.1 security and maintenance release was announced on December 13. It features 46 fixes and enhancements. This version corrects four security […]

WordPress 5.3.2 is now available! This maintenance release features 5 fixes and enhancements. WordPress 5.3.2 is a short-cycle maintenance release. The next major release will be version 5.4. You can download WordPress 5.3.2 by clicking the button at the top of this page, or visit your Dashboard → Updates and click Update Now. If you have sites that support […]

Curious about the Gutenberg powered slides used during State of the Word? This post uncovers some technical and design aspects of the project!

• Project: Joomla!
• SubProject: CMS
• Impact: High
• Severity: Low
• Versions: 2.5.0 – 3.9.13
• Exploit type: SQL injection
• Reported Date: 2019-December-01
• Fixed Date: 2019-December-17
• CVE Number: CVE-2019-19846

Description

The lack of validation of configuration parameters used in SQL queries caused various SQL injection vectors.

Affected Installs

Joomla! CMS versions 2.5.0 – 3.9.13

Solution

Upgrade to version 3.9.14

Contact

The JSST at the Joomla! Security Centre.

WordPress 5.3.1 is now available! This security and maintenance release features 46 fixes and enhancements. Plus, it adds a number of security fixes—see the list below. WordPress 5.3.1 is a short-cycle maintenance release. The next major release will be version 5.4. You can download WordPress 5.3.1 by clicking the button at the top of this page, […]

As you may have noticed on the front page of our website, we’ve added a new section about the “Up Next” initiative, explaining upcoming changes to cPanel & WHM. A significant change coming in early 2020 is the EasyApache 3 to EasyApache 4 autoconversion. When we last made a change in the Up Next initiative, we upgraded users on out of date and unsupported cPanel & WHM version to Version 78. This upgrade did come …

On Wednesday, November 13th, a contingent of the cPanel team volunteered at the Houston Food Bank. Over the course of three hours, we managed to assemble 4800 boxes of food and prepare 60 pallets for delivery to families in need. These boxes of food will serve families throughout 18 different counties across the greater Houston area.  Founded in 1982, the Houston Food Bank is a 308,000 square-foot warehouse and is the largest Feeding America food bank in the …

Version 5.3 of WordPress is available for download or update in your WordPress dashboard. The new editor continues to become more refined with intuitive interactions, a focus on accessibility, and a more consistent look & feel. A fresh new default theme is shipping with this release too, that puts blocks to good use and lets all users have more control over how their content appears.

The fourth release candidate for WordPress 5.3 is now available! WordPress 5.3 is currently scheduled to be released on November 12 2019, but we need your help to get there—if you haven’t tried 5.3 yet, now is the time! There are two ways to test the WordPress 5.3 release candidate: Try the WordPress Beta Tester plugin (choose the “bleeding edge […]

• Project: Joomla!
• SubProject: CMS
• Impact: High
• Severity: Low
• Versions: 3.2.0-3.9.12
• Exploit type: CSRF
• Reported Date: 2019-October-10
• Fixed Date: 2019-November-05
• CVE Number: CVE-2019-18650

Description

A missing token check in com_template causes a CSRF vulnerability.

Affected Installs

Joomla! CMS versions 3.2.0 – 3.9.12

Solution

Upgrade to version 3.9.13

Contact

The JSST at the Joomla! Security Centre.