Update urgently to WooCommerce 2.3.6!

WooCommerce 2.3 – Handsome Hippo

A couple of days ago the people at Wordfence, as they themselves report in WooCommerce SQL injection vulnerability, warned the creators of WooCommerce about a serious security flaw that Matt Barry, one of the members of Wordfence, had detected a few minutes earlier. Specifically it is an SQL injection vulnerability that affects all the versions released up to then.

After the notification sent on the 12th, yesterday, the 13th, an urgent update was released, WooCommerce 2.3.6, which solves, as well as the vulnerability reported by Matt Barry, a large number of small bugs, and brings some improvements that make WooCommerce 2.3 even better.

In any case do not panic, since this vulnerability, although it is serious, also requires an Administrator or Shop Manager user account in order to be exploited, so it needs to combine its execution with an XSS attack. In this way its dangerousness decreases, above all if your websites are well protected.

Our recommendation, as almost always, is to update urgently to WooCommerce 2.3.6 and, if your WordPress is not protected beyond the standard protections, we recommend that you take a look at our online shop, specifically at Security Improvement, and that you shield, as far as possible, the security of your website under WordPress.

Have you suffered this or any other WordPress or WooCommerce vulnerability? Tell us your case.