Elementor vulnerability; and WordPress 6.4.2 patch released

bikegremlin

For anyone using Elementor, and running site with a lot of contributors (that aren't strictly vetted), Elementor seems to have a vulnerability.
Update should help according to Elementor but it's yet to be confirmed.

https://www.bikegremlin.net/threads/bikegremlin-i-o-news.10/#post-220

Also, WordPress 6.4.2 update has been released, addressing a potential vulnerability.

https://wordpress.org/news/2023/12/wordpress-6-4-2-maintenance-security-release/

don_keedic

Good looking out man!

host_c

Thx!

DanSummer

According to wordfence, the first update didn't fix the issue so a second version was provided yesterday.

Encoders

@DanSummer said:
According to wordfence, the first update didn't fix the issue so a second version was provided yesterday.

ah yes, just like the most of wordpress "security" patch