Garry Smith
The security concern is not confined to those premium plugins & themes that are purchased from CodeCanyon or ThemeForest. Anyone, who runs WordPress website, needs to take instant action to make sure the security regardless of knowing that from where plugin or theme was being sourced.
Steps That Need To Be Taken At Your Glance
However, no specific way is defined to know affected plugins or themes as the security issue is far-reaching, but the best suggestion is to check the latest updates periodically. The team of Envato continues to work along with the authors of CodeCanyon & ThemeForest. They are discussing the issue and at the same time asking the authors to discover, whether there items are secure or not as well as update them, if required.
List of Affected WordPress Plugins:
[list]
[li]WordPress SEO[/li]
[li]All In one SEO[/li]
[li]WP-E-Commerce[/li]
[li]Jetpack[/li]
[li]Give[/li]
[li]WPTouch[/li]
[li]Ninja Forms[/li]
[li]Download Monitor[/li]
[li]Google Analytics by Yoast[/li]
[li]My Calendar[/li]
[li]Related Posts for WordPress[/li]
[li]Gravity Forms[/li]
[/list]
In coming weeks, we expect that items purchased by ThemeForest & CodeCanyon will be updated regularly with major updates. As the updates will be available on Downloads page, they may be downloaded from there. If you want to be notified automatically regarding all new updates, then you need to activate “Item update notifications” in the settings of your email.
In order to update items, attained from other sources, you must check the page of Plugins & Themes under WordPress Admin section or contact product’s source.
Our recommendations for you is to keep checking the updates, particularly in the coming few weeks and ongoing basis as well. It is crucial to update WordPress installation and related themes & plugins.
If you still have concern related to your plugin or theme vulnerability, then don’t hesitate to contact Joost on WordPress Slack (@joostdevalk) for best solution.
SecuritySenses provides a platform dedicated to News and Information for cybersecurity applications and tools.
