Branded Social Images, a New Plugin for Generating Per-Post Open Graph Images

Generated social images seem to be all the rage now. Automattic scooped up Daniel Post’s Social Image Generator last month for eventual inclusion in Jetpack. There is a proposal to dynamically generate them for plugins and themes hosted on WordPress.org. And, there is a new player in town: Branded Social Images. Admittedly, I have had a mild obsession lately with …

WP Fastest Cache Patches Authenticated SQL Injection and Stored XSS Via CSRF Vulnerabilities

The Jetpack Scan team has published a summary of two issues recently discovered in the WP Fastest Cache plugin – an Authenticated SQL Injection vulnerability and a Stored XSS Via CSRF vulnerability. “If exploited, the SQL Injection bug could grant attackers access to privileged information from the affected site’s database (e.g., usernames and hashed passwords),” Automattic security research engineer Marc Montpas …