estatik security update

Estatik released SECURITY update! File Upload Vulnerability Fixed.

Posted by admin

September 24, 2016

It is really great that there are additional resources in WordPress community who can help us with plugin testing and reporting.

As soon as we received File Upload Vulnerability report from pluginvulnerabilities.com, we started to work on both versions of Estatik plugin to fix vulnerability. We needed some time to make this properly and thanks to guys from pluginvulnerabilities.com, finally got both versions reviewed and approved. Now any possibility of hacking through Estatik plugin is excluded.

Please read the information below carefully and take this post seriously.

The code changes were made in both versions - Simple and PRO.

 

We strongly recommend to update your version of the plugin. Do not update the plugin without your website backup and previous plugin version reserved. Please backup your website with  your current host. This will mean you can restore your website if the update causes any problems.

 

In case if any customization was made by you or Estatik team, please do not hesitate to contact us when you decide to update. We can provide you with detailed instructions what must be changed in the code. If you prefer us to make these changes, just request it and we will add necessary code directly to your current version absolutely free.

 

Keep your WordPress real estate site secure!

 

Besides Estatik PRO 2.4.0 included the next improvements and minor bugs fixes.

Fixed:

  • * File upload vulnerability fixed
  • * Bootstrap library conflicts removed
  • * upgrade_wp_estatik_  tables removed
  • * Google Maps API issue fixed
  • * Cyrillic issue fixed

Added:

  • * Captcha to Request info form (PRO)
  • * Date added Yes/No option added to plugin settings (PRO & Simple)

 

What if I do not update to latest version?

Without the plugin being updated you risk your website every day. Please keep your plugins up to date to keep your website secure.

Update procedure can be found here. If any issues appear or you haven't received an email with Download update link, please drop us a message via chat or contact us page.