Important Security Update from Dokan
Not exactly how i wanted to start my week, by what can i do. I just received this mail from the Dokan Team. Who else got this?
Subject: Important Security Update from Dokan
Hi XXXXXXX,
We're writing to share an important security update regarding Dokan Pro.
What Happened?
As part of our routine security review, we identified a software supply-chain attack involving an npm package used within our infrastructure. The incident resulted in unauthorized access to part of our cloud storage, where we found that a ZIP file had been modified and uploaded again.
Our engineering and security teams immediately contained the incident and secured the affected systems. We addressed the unauthorized changes, reviewed the affected components, and completed the necessary remediation.
The identified security issue has now been addressed, and we have released Dokan Pro version 5.0.11.
How We Addressed The Issue
Although the identified issue has been resolved, we're taking additional precautions to provide our users with another layer of protection.
We have reviewed and strengthened the affected systems and are continuing to monitor them closely.
As part of these precautions, we strongly recommend that all Dokan Pro users update their plugin and review their WordPress websites.
What You Need to Do
- Update Dokan Pro
Please update to Dokan Pro version 5.0.11.
We strongly recommend that you do not continue using an older version of Dokan Pro.
- Change Your WordPress Passwords
Please change the passwords of your WordPress users, particularly Administrator accounts.
Use strong, unique passwords and avoid reusing passwords that you use on other services.
We also recommend enabling two-factor authentication (2FA) for Administrator accounts wherever possible.
- Check Your Administrator Accounts
Go to WordPress → Users and review the accounts with Administrator access.
If you notice an Administrator account that you do not recognize, please remove it immediately and change the passwords of your other WordPress users.
- Review Your WordPress Files
Please review your WordPress files and directories for any files that you do not recognize or anything that appears to have been added or modified unexpectedly.
If you notice anything suspicious or are unsure about a particular file, please contact us. Our team can help review the files with you and advise you on the appropriate next steps.
[link] [comments]