Patchstack
Companywww.patchstack.com
7
MENTIONS
7
EPISODES
6
PODCASTS
Search complete. 7 mentions across 7 episodes found for "Patchstack".
Sep 7, 2026
Matt MedeirosHOST
These brands are supporting WordPress media and helping us invest in your future as a WordPress professional.
Matt MedeirosHOST
Our Foundation Plus sponsors like Hostinger, BigScoots, StellarWP, PersonalizeWP, WeGlock, and PatchStack help us keep the lights on.
Matt MedeirosHOST
Thanks to all of our members in the WP Minute Slack channel, which you can join too.
Matt MedeirosHOST
Head on over to thewpminute.com slash support to get access.
Aaron D. CampbellGUEST
And that's now ours for major vulnerabilities.
Aaron D. CampbellGUEST
As a matter of fact, we did a Monarchs in conjunction with Patchstack did like a year in review thing looking back at last year.
Aaron D. CampbellGUEST
And we saw that for the more major vulnerabilities, It was about five hours.
Aaron D. CampbellGUEST
That's not enough time for, you know, what happens if it happens in the middle of the night for a host who's constantly monitoring that, immediately patching it.
Aaron D. CampbellGUEST
And that's now ours for major vulnerabilities.
Aaron D. CampbellGUEST
As a matter of fact, we did a Monarchs in conjunction with Patchstack did like a year in review thing looking back at last year.
Aaron D. CampbellGUEST
And we saw that for the more major vulnerabilities, It was about five hours.
Aaron D. CampbellGUEST
That's not enough time for, you know, what happens if it happens in the middle of the night for a host who's constantly monitoring that, immediately patching it.
David ShipleyHOST
Five critical flaws in WordPress plugins and themes could hand attackers an entire site.
David ShipleyHOST
WordPress and Patchstack disclosed the vulnerabilities which hit WPMU Dev Dashboard, the Avada theme, TranslatePress, Pods, and Give WP.
David ShipleyHOST
Four score 9.8 out of 10.
David ShipleyHOST
One is a perfect 10.
speaker_0HOST
A critical flaw in the popular GiveWP WordPress plugin allows unauthenticated attackers to execute commands on web servers.
speaker_0HOST
PatchStack disclosed the issue on August 28th, after a researcher reported it on July 28th, and the plugin vendor released version 4.16.7.2 to fix the PHP object injection chain.
speaker_0HOST
The vulnerability, which carries a maximum severity score, impacts all versions through 4.16.7.1 and requires immediate patching to prevent server takeover.
speaker_0HOST
Extortion group FulcrumSec claims responsibility for stealing 86GB of data from Manchester Airport's group after finding exposed API credentials in client-side JavaScript.
speaker_1HOST
Right.
speaker_0HOST
And this is disclosed by Patchstack, who credited the DigitalOcean security team for the discovery.
speaker_0HOST
And the root cause here is described as a, quote, loose Boolean check, unquote, on the return values of a function called Open SAML Verify.
speaker_1HOST
Yeah, this is where we get into the weeds of how programming languages actually interpret logic.
Eric KarakovacHOST
These brands are supporting WordPress media and helping us invest in your future as a WordPress professional.
Eric KarakovacHOST
Our Foundation Plus sponsors like Hostinger, BigScoots, StellarWP, PersonalizedWP, Weglot, and Patchstack help us keep the lights on.
Eric KarakovacHOST
Thanks to all of our members in the WP Minute Slack channel, which you can join too.
Eric KarakovacHOST
Head on over to thewpminute.com slash support to get access.