The Pagely Blog.Articles and insights covering topics of interest to our clients and the WordPress community.

WordPress Core No notable WordPress core security releases. Plugin/Theme Vulnerabilities of Note Duplicator Plugin The Duplicator and Duplicator-Pro plugins both contained a vulnerability that allowed attackers to make a single request to a website, and be able to download arbitrary files from the WordPress website. It is being reported that attackers are actively using this vulnerability, attempting to download files like wp-config.php; which contains the database credentials and secret encryption…