Our team at CourseVector provides top-notch managed hosting services, constantly working behind the scenes to keep our clients’ websites secure and running smoothly.
We recently addressed a critical vulnerability in the IQ Testimonials plugin, where an issue in versions up to 2.2.7 allowed unauthenticated attackers to upload arbitrary files due to insufficient file type validation. This vulnerability, identified as CVE-2024-6314, could potentially lead to remote code execution if the ‘gd’ PHP extension is not loaded on the server.
By proactively resolving such high-risk issues, we ensure our clients’ sites remain protected, and we keep them informed about our diligent efforts in maintaining their online presence.