Supply Chain Breach in Gravity Forms Plugin Reveals Malware Injection Risk

Supply Chain Breach in Gravity Forms Plugin Reveals Malware Injection Risk

Update (July 11, 2025): Gravity Forms version 2.9.13 has been released as of this writing. Terminus Agency strongly recommends that all users update to the latest version immediately to ensure their sites are protected from the recently discovered supply chain compromise detailed below. Terminus Agency clients on our WordPress Hosting & Maintenance plans do not…

WordPress Security – All-In-One SEO Vulnerability – High Risk

WordPress Security – All-In-One SEO Vulnerability – High Risk

The original disclosure by Wordfence can be found here on their blog. Terminus Agency regularly provides WordPress Security updates for their customers. Terminus Agency clients are likely already protected from this issue. A high risk cross site scripting (XSS) vulnerability has been discovered in All in One SEO Pack Plugin versions 2.3.6.1 and older. Please immediately…

WordPress Security: Ninja Forms Shell Upload Vulnerability – Very High Risk

WordPress Security: Ninja Forms Shell Upload Vulnerability – Very High Risk

The original disclosure by James Golovich can be found here on his blog.  Terminus Agency regularly provides WordPress Security updates and this article has been republished to keep you up to date with the latest WordPress security news. Multiple critical security vulnerabilities were discovered in the Ninja Forms plugin for WordPress. If you are using a version…