Security Updates: WordPress Plugins and WHMCS

Privacy preference center

By clicking "Accept all" you allow cookies that improve your experience on our site, help us analyze site performance and usage, and enable us to show relevant marketing content. You can manage cookie settings below. By clicking “Confirm selection” you agree with the current settings.

Accept all

Reject All

Manage consent settings

Necessary cookies

Always Active

These cookies are essential for the website to function properly. They enable basic features like page navigation and secure access areas. Without these cookies, the website cannot function.

Ad storage cookies

These cookies help to make a website usable by enabling functions like page navigation and access to secure areas of the website. The website cannot function properly without these cookies. They are also used to track user interactions with ads.

Analytics storage cookies

These cookies help us analyze website usage to improve performance. They track how visitors interact with the website, allowing us to optimize the user experience.

Personalization cookies

These cookies enable the website to remember user preferences and personalize content. They help tailor the website's experience to your interests.

Ad user data cookies

These cookies collect information about user interactions with ads on the website. The data is used to improve ad targeting and deliver relevant advertising.

Ad personalization cookies

These cookies track user behavior to personalize the ads displayed to you. They help ensure that the ads are relevant to your interests, improving your overall ad experience.

Confirm selection

There have been a few security announcements recently for popular software products in the web hosting world:

Popular web host billing software WHMCS announced a security advisory on April 23rd with a critical update needed to most currently used versions of its product
WordPress plugin W3 Total Cache released version 0.9.2.9 on April 17, all previous versions are vulnerable to a remote code execution exploit. This is actually a new exploit, not to be confused with a previously discovered remote data leak exploit in W3 Total Cache versions back in December 2012.
A similar WordPress plugin WP Super Cache released version 1.3 to address the remote code execution vulnerability, all previous versions should be upgraded ASAP.

For in-depth information about the WordPress cache plugins vulnerability, check out this great debrief posted by Belgian software developer and WordPress enthusiast Frank Goossens.

Anyone who has ever installed these software packages is urged to check their versions as soon as possible. As always, any current customers who would like help with these updates should open a support ticket for free assistance.