AuctionBytes Blog
Covering auctions, collectibles and marketplace selling.

AuctionBytes Blog The AuctionBytes Blog has been giving a voice to online merchants since its launch in 2005. Named one of the world's top 30 blogs in 2008 by "Blogging Heroes." Weigh in with your thoughts on the joys and pitfalls of selling online.
Wed Dec 28 2016 15:16:13

Security Warning for Sellers Using Shopping Carts

By: Ina Steiner

Sponsored Link

A red alert was issued for sellers who run their stores using certain shopping cart software - it also impacts content management software, for those using certain publishing or blogging platforms such as the popular WordPress. 

Raf from ShipRush issued a warning this morning, advising of a critical issue for those merchants using WordPress, CS-Cart, Magento, Zen Cart X-Cart or other PHP carts.

"The ShipRush team urges you to contact your web master now, to have the PHPMailer on your server upgraded or disabled," he blogged.

You can learn more about the flaw by doing a search. This PC World article explained, "The PHPMailer library is used directly or indirectly by many content management systems (CMSs) including WordPress, Joomla and Drupal. Where the library is not included in their core code, it is likely available as a separate module or can be bundled with third-party add-ons. Because of this, the flaw's impact can vary from website to website."

ShipRush promised to update its blog post as it continues to learn more - "This is a critical issue. Take care of it immediately," Raf warned.

Comments (0) | Permalink

Readers Comments  

Login is required to post comments.
To sign in to leave a comment using your AB Verify User Name, fill in the form below. If you have not yet signed up for AB Verify, or if you'd like more information, go to the Registration Page

Login for AB Verify
Be sure and use your email address and password to log in.

 Forgot Your Password?
 Even though you are signed in with the AuctionBytes Blog, you will have to sign in to the EcommerceBytes blog. But you can sign in with your existing AB Verify info.