Return-Path: <1axb98tk758utgijdfpff3jb92xd3otpxozp1e-help=rommedia.eu@4354010m.wordfence.com>
Delivered-To: help@rommedia.eu
Received: from web05.ouiheberg.com
	by web05.ouiheberg.com with LMTP
	id 4nL6OoUoc2W9EDQAw70cEg
	(envelope-from <1axb98tk758utgijdfpff3jb92xd3otpxozp1e-help=rommedia.eu@4354010m.wordfence.com>)
	for <help@rommedia.eu>; Fri, 08 Dec 2023 15:30:29 +0100
Return-path: <1axb98tk758utgijdfpff3jb92xd3otpxozp1e-help=rommedia.eu@4354010m.wordfence.com>
Envelope-to: help@rommedia.eu
Delivery-date: Fri, 08 Dec 2023 15:30:30 +0100
Received: from bid458m.4354010m.wordfence.com ([158.247.16.68]:27377)
	by web05.ouiheberg.com with esmtps  (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
	(Exim 4.96.2)
	(envelope-from <1axb98tk758utgijdfpff3jb92xd3otpxozp1e-help=rommedia.eu@4354010m.wordfence.com>)
	id 1rBbrp-00EJZe-26
	for help@rommedia.eu;
	Fri, 08 Dec 2023 15:30:29 +0100
Received: by 172.16.227.89 with SMTP id aybpbz3a1zmnbrir2fm7dixsd011tq46px39yrpl;
        Fri, 8 Dec 2023 14:29:45 GMT
DKIM-Signature: v=1; s=hs2; d=4354010m.wordfence.com; 
        i=@4354010m.wordfence.com; 
        h=sender:from:from:reply-to:to:to:cc:cc:subject:subject:list-unsubscribe:form-sub:feedback-id; 
        a=rsa-sha256; c=relaxed/relaxed; 
        bh=UCC0uz+DYJAZsIqGqz19skgYJygRA7mJMVbL3kOWqsI=; 
        b=n/8tKeB5xU2FlICFaa96+GXA6x1Zlic09O6ZLYef2hONHCf32qtv6qBA31wR4s
         hl4pgZdpDjsXqDLtdTQDDp1ovBhL9Axns8k8XH8xRbW6KKE8cMlNDNHIRGpdOtR
         kEt8Un1FojXi/Zxk8H8/6kZx1D8jx3VherB6R12UyAFjKi2PoKbrNgx0YZLnDyE
         /g2uWHkN5VYphpQ45DLKF1o/YeQoq4oWyV1mOlNIbxvbey20KvI6R9Iz9WuCkhO
         O+v4baPxTwSqgdeF+iNmiEWmvWfAJ84Zvj4D7EIZWcrI9EOEdwbhCEDyUcrZnJ5
         jjyqgVvGA6EM2K0gB1h2qIpLAZEg==; q=dns/txt; t=1702045784; 
        x=1702308584;
DKIM-Signature: v=1; s=hs2; d=wordfence.com; i=@wordfence.com; 
        h=sender:from:from:reply-to:to:to:cc:cc:subject:subject:list-unsubscribe:form-sub:feedback-id; 
        a=rsa-sha256; c=relaxed/relaxed; 
        bh=UCC0uz+DYJAZsIqGqz19skgYJygRA7mJMVbL3kOWqsI=; 
        b=F2T6GB96XG6pGJmgSjBet7iO5mVfkKgulUHMbhbd6nqE5BrfRp89UIs96d24QX
         wr8/MAeevbWEPww7TeHJKfNftzQgdBsi9YWX+lNI/gLi7/J608JgnqHV0gWm25D
         NsDdMlDkQoAz4VwZ3WlPmNWd8B69KqvCkeJPcJWXJAI8HPAplQWCJvaDUJdo9gl
         faE887ksUPFm4p8HkKABIocYBeNGHpxS+1l2WcoAYn49by/vYtDjG5bGBXADH27
         Ew/UscDcRchJX7A4pJInUrlmmbPqQvFXBhzpKuXWBaj9DehApLz6BLIuyWdgKgD
         FWdu02i/5jXN7x0jgVQy1uvEmrvA==; q=dns/txt; t=1702045784; 
        x=1702308584;
X-HS-Cid: 1axf2arnxbmxnxer75gn5it8v74mwcxgp6xfgy
List-Unsubscribe: <mailto:1axc8zho2o46am3m669h8ytx2ok2qfyd36vzbm-help=rommedia.eu@4354010m.wordfence.com?subject=unsubscribe>
Date: Fri, 8 Dec 2023 06:29:45 -0800
From: Wordfence <list@wordfence.com>
Reply-To: no-reply@wordfence.com
To: help@rommedia.eu
Message-ID: <1702044323114.dd77c4c0-e780-41cf-9221-602ada7ec1f1@4354010m.wordfence.com>
Subject: [WordPress Security] PSA: High Severity File Upload Vulnerability
 in Elementor Patched
MIME-Version: 1.0
Content-Type: multipart/alternative; 
	boundary="----=_Part_8854552_2021019539.1702045779886"
X-Report-Abuse-To: abuse@hubspot.com (see
 https://policy.hubspot.com/abuse-complaints)
X-Spam-Status: No, score=-0.2
X-Spam-Score: -1
X-Spam-Bar: /
X-Ham-Report: Spam detection software, running on the system "web05.ouiheberg.com",
 has NOT identified this incoming email as spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  High severity file upload vulnerability that can be use for
    remote code execution patched in Elementor. Wordfence-Logo.png (https://email.wordfence.com/e3t/Ctc/GC+113/cwG7R04/VX3hvn72Dfz1W7ByXrv1zyVLZW8QwHkG56Q9XQN1xVmZ83prCCW6N1vHY6lZ3kWW6Jj05g1_hH5-W7YQXWH3ZyCV_N2lTyXS1XHLFW8vwsCz7TvwvSW7PY8F82DMdDKW3
    [...] 
 Content analysis details:   (-0.2 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 RCVD_IN_ZEN_BLOCKED_OPENDNS RBL: ADMINISTRATOR NOTICE: The query
                              to zen.spamhaus.org was blocked due to
                             usage of an open resolver. See
                             https://www.spamhaus.org/returnc/pub/
                             [158.247.16.68 listed in zen.spamhaus.org]
  0.0 URIBL_DBL_BLOCKED_OPENDNS ADMINISTRATOR NOTICE: The query to
                             dbl.spamhaus.org was blocked due to usage
                             of an open resolver. See
                             https://www.spamhaus.org/returnc/pub/
                             [URIs: wordfence.com]
  0.0 URIBL_ZEN_BLOCKED_OPENDNS ADMINISTRATOR NOTICE: The query to
                             zen.spamhaus.org was blocked due to usage
                             of an open resolver. See
                             https://www.spamhaus.org/returnc/pub/
                             [URIs: wordfence.com]
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was
                             blocked.  See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URIs: wordfence.com]
 -0.0 SPF_PASS               SPF: sender matches SPF record
  0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or
                             identical to background
  0.0 HTML_MESSAGE           BODY: HTML included in message
 -0.1 DKIM_VALID             Message has at least one valid DKIM or DK signature
  0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not necessarily
                             valid
 -0.1 DKIM_VALID_EF          Message has a valid DKIM or DK signature from
                             envelope-from domain
 -0.1 DKIM_VALID_AU          Message has a valid DKIM or DK signature from
                             author's domain
 -0.0 T_SCC_BODY_TEXT_LINE   No description available.
  0.0 LOTS_OF_MONEY          Huge... sums of money
 -0.0 DKIMWL_WL_HIGH         DKIMwl.org - High trust sender
X-Spam-Flag: NO

------=_Part_8854552_2021019539.1702045779886
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable

High severity file upload vulnerability that can be use for remote code exe=
cution patched in Elementor.

Wordfence-Logo.png (https://email.wordfence.com/e3t/Ctc/GC+113/cwG7R04/VX3h=
vn72Dfz1W7ByXrv1zyVLZW8QwHkG56Q9XQN1xVmZ83prCCW6N1vHY6lZ3kWW6Jj05g1_hH5-W7Y=
QXWH3ZyCV_N2lTyXS1XHLFW8vwsCz7TvwvSW7PY8F82DMdDKW3jZCz06Y_1v0W4XZXdr6_RZtDW=
2nkMk77Z3cZ4W4qrtBQ1WmXsWW5hm6KH7qyJmFW6MD26J4-9VJyW8zYdvV8JtY39W7nkPwc4Z8Q=
6nW6RK0pF9c3FjCN7yZ5gm79SfnW5B3fHh4tzLg3W6fPVpd1W3-bWW3C90HT39WhbPW2rTFnj7m=
BpVdW6m6yZ27y6rdJW3F2vMQ2XJKnCW13cNSm6ftS4Yf7PD6Lq04 )

FeaturedImage_Wordfence_63.022 (https://email.wordfence.com/e3t/Ctc/GC+113/=
cwG7R04/VX3hvn72Dfz1W7ByXrv1zyVLZW8QwHkG56Q9XQN1xVmYg5m_5PW50kH_H6lZ3lfW1N3=
6pC69lzlvMrsdb7JfWJ-W65ykwl8GPdyxMD1Y0dfn4RyW8PPKC42QgHlmW6dQ4sN3Wv-NMW7P9M=
Nc3Nf9J_N2_g5D4ZtK-kW7TsY5f3vCZNxW9dFDcg5ddxjKW4PBzc85mL8rfW7LRjjl3DG1YbW3M=
vc1w7kPw8hW8k22Vg3xczNVVgNdwB7gxJRkN7k1hHBZDVZjVkwfF724jqRmVmmnMR4SztWhW4n_=
zZm5DxsVQW2vDD_S5mhl-qW3bbRg51YdWYGW7LyRlH6z67RdN1XN3KsP3cFGW5200YH5YDWBlW5=
k8D6G7LytkKW7w3vg76yX18dW5ygYlv7-Qg1zW15g2-H1z9QBcW58Kq4h8xTYbDW8Ndb7V854Bd=
lW3d2sG44ZdfYdN6Q9ZzNr7Pglf5WwPmT04 )

On December 6, 2023, the Wordfence team noticed a changelog entry for versi=
on 3.18.1 of Elementor, a WordPress plugin installed on nearly 9 million si=
tes. We did not discover the original vulnerability and only became aware o=
f it after reviewing the changelog containing a partial patch. We immediate=
ly released a firewall rule to Wordfence Premium (https://email.wordfence.c=
om/e3t/Ctc/GC+113/cwG7R04/VX3hvn72Dfz1W7ByXrv1zyVLZW8QwHkG56Q9XQN1xVmZM3prC=
CW7Y8-PT6lZ3lDW3hd_lw1KY00CW3Jkdd13dWh6MW53dPc72hkL_fW4ptlss5MdlYrW5WXKQ62k=
_cMwW3Mz0Dn5-wMY0W29V9Cq8h1HNJN49-pLMLYLsTW7nP6G88XQ1KKW4tlqTX7XK6GGW3hGmJh=
58vBFbW2d0KXJ93Cj9TW97ww1N78zwqtW3jG5FM3hLV9CW8Kbbgj2WWqYBW4TlSZP6WdKqjW3cN=
bBH8LDnyFW6FKrRH3XwjlJW1rZSkd5gPnPpW6wYSkg2t0b2mVNFY6G3_n0pCW3slm6Z8m7C7JW6=
tF7VH85C3dpW5-dk4y3-D39sVpzx1-78pVJwW5q07-C4TJzHsf7Vks6-04 ) , Wordfence Ca=
re (https://email.wordfence.com/e3t/Ctc/GC+113/cwG7R04/VX3hvn72Dfz1W7ByXrv1=
zyVLZW8QwHkG56Q9XQN1xVmZM3prCCW7Y8-PT6lZ3nDW1LRdfD2Km9wHW7kHbKb43q17QW5J_KJ=
W3K8FN4W3Pp3Q627y9xKW2hG28l44PN6ZW1y0rD992TvxGW815Fb07Y-jxfW7MtcHJ4XV4qvW8W=
Q1wh4NG6jVW1Wn3Nj6wVMZzW8qS0ff8s8kjVW8fwcyP4Xgmf4W51vTjW7MkfJ4VKvKgx8pMb0NW=
7Z7zNh55dB-9W57XK8q472Y_mW1y--rz6jxBFkW1-8FJV77_PFbW8nzjPY4JsVCRW3V-hvR4V8b=
CkW5YLFyf38bwfnW8Mjk1w5VkTG8W5clLG_8YBCxKW98wTfV1Kx8xFW3kNLB06q6vGdW40svwt5=
5C-5Hf8FRYQK04 ) , and Wordfence Response (https://email.wordfence.com/e3t/=
Ctc/GC+113/cwG7R04/VX3hvn72Dfz1W7ByXrv1zyVLZW8QwHkG56Q9XQN1xVmZM3prCCW7Y8-P=
T6lZ3lwW2hH0Lh3BCDNmW7Y282N3LZC9dW1TY3k42xD9dpW4QnG8Y5mWvwcN18j24QvS8s2W2jV=
4f53g4LqFMLTFkXVm3qRW6_QTJp9hPX2DW8-G7F96WnQ6gW47xttb97bR_FW9cKNZZ5pBQTlVNQ=
_v9845rb_W8JK7yM5Gb6gNW9cTSCL81CnK6W3fKBxM5Znw50W4P3N5Z2TyKZFW8ZMTHY6BwJVdW=
7_vZ-g1NC_RxW7b5WD-4vPcMWW7TWvnp8ch8LjV3MCwm6r0ltRVW5yM94qNFgDW8WZZ1x6CQbn_=
W3yrGFC6QC0jmW60NTkt7pvW1zN2lrkB77pLH1f4PCpHn04 ) customers. The firewall r=
ule will be made available to free Wordfence users 30 days later, on Januar=
y 5, 2023.

After reviewing the vulnerability further, we determined that the patch was=
 insufficient and could still be exploited, though it would be more difficu=
lt.

We immediately contacted the Elementor team the same day, on December 6, 20=
23, to let them know that the patch failed to fully resolve the issue. Elem=
entor released a sufficient patch in version 3.18.2 on December 8, 2023. We=
 commend the team at Elementor in their swift response to this situation.

Fortunately, the vulnerability, while severe, requires Contributor-level pr=
ivileges or higher to exploit, which minimizes the number of sites likely t=
o be impacted. Few sites use Contributors, and attackers would need to be a=
ble to register as a contributor or higher user, or obtain valid credential=
s for a contributor-level+ user account to exploit this vulnerability.

CONTINUE READING ON THE BLOG
(https://email.wordfence.com/e3t/Ctc/GC+113/cwG7R04/VX3hvn72Dfz1W7ByXrv1zyV=
LZW8QwHkG56Q9XQN1xVmYg5m_5PW50kH_H6lZ3lfW1N36pC69lzlvMrsdb7JfWJ-W65ykwl8GPd=
yxMD1Y0dfn4RyW8PPKC42QgHlmW6dQ4sN3Wv-NMW7P9MNc3Nf9J_N2_g5D4ZtK-kW7TsY5f3vCZ=
NxW9dFDcg5ddxjKW4PBzc85mL8rfW7LRjjl3DG1YbW3Mvc1w7kPw8hW8k22Vg3xczNVVgNdwB7g=
xJRkN7k1hHBZDVZjVkwfF724jqRmVmmnMR4SztWhW4n_zZm5DxsVQW2vDD_S5mhl-qW3bbRg51Y=
dWYGW7LyRlH6z67RdN1XN3KsP3cFGW5200YH5YDWBlW5k8D6G7LytkKW7w3vg76yX18dW5ygYlv=
7-Qg1zW15g2-H1z9QBcW58Kq4h8xTYbDW8Ndb7V854BdlW3d2sG44ZdfYdN6Q9ZzNr7Pglf5WwP=
mT04 )

Vulnerability Summary from Wordfence Intelligence

Description: Elementor <=3D 3.18.1 Authenticated(Contributor+) Arbitrary Fi=
le Upload to Remote Code Execution via Template Import (https://email.wordf=
ence.com/e3t/Ctc/GC+113/cwG7R04/VX3hvn72Dfz1W7ByXrv1zyVLZW8QwHkG56Q9XQN1xVm=
-25m_5PW8wM7ks6lZ3mnW87n2gB2mxxgtW9h6nsN6cLK4RN8WKy4WwCBfqW6rgy_T8bQKSBW8K1=
TZ-6CKXdVW1qw83_5KQJpPW8swq9Y5gKJj-W5KvVxv3D-g-cVLGt-H78bCv8W54lGtk10vkmqW8=
YqNMC4XvqKRW11KFPg2M6pYbW1qLKvX8d-v3sW1NJjPM7FJts2W5wFnZv5ZL226W8F2FWg34_V3=
6W63nMys1h4vDDN2c6_xm6pTkjW1_0Pmm5LdMMlW3WGvNj1VZmYzVB4B613nzC98VxqByp3cy4W=
YW31F-ZC3klGXwW6BYp71917P-bW11Gzfs6bsSr2W6ymMHz61_7XLVxzcf18NWpfJW1-WRCw3DQ=
5bNW1lRrJQ14mGCSW8J2SMZ5PXwJrW2tD2zb854-DhW4V92qj8NRg5_VC4fkB8L5r0cW6f-WHz5=
WgB0GW6TlPzS7Z9_ggW8Rs5pq8P_66QW76Gt0799TBbwVfKb1V4BYTq2W38YrDG13ZSgyW2VKKr=
-4YjYfNW7rfSzg5HjrYyVhgH9C2tcl4XN2VsSn5qmF7_W8ZmZ9y3m12zHf5vYVzC04 )

Affected Plugin: Elementor

Plugin Slug: elementor

Affected Versions: <=3D 3.18.1

CVE ID: CVE-2023-48777

Pending CVSS Score: 8.8 (Highl)

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Researcher/s: H=E1=BB=93ng Qu=C3=A2n (https://email.wordfence.com/e3t/Ctc/G=
C+113/cwG7R04/VX3hvn72Dfz1W7ByXrv1zyVLZW8QwHkG56Q9XQN1xVm-l3prCCW95jsWP6lZ3=
mKW4SPYvS5vJ70bW5Fv1kK3yHtCsW2wrtSv1z4ZLMW8584h788lP5BW93jzwy8k8f5FW7L1c_K5=
0ktVMW5XD8tw5x_4c7W48HdDs4MdN1VW7ZDpc-3ddvvjW5qb4Vc3CY2JhW1RJ58N87XcrdW70f1=
vV9jzft7W3x-Mgc8dt91fW17GYWC6y27HYW8l17t195y0tzN9f1qh5jC8mhW7CLX_r3wZ9_RW9f=
_6b620chTtW4j85068bz9cfW1Dqz_g8pBWXKW1RdY014WWpMhN83sCTGDJvGVW4ZtC5r3_W7hzW=
5mswFJ945kPsVqKGkD5Qtx3jW8N9mZ23_5j06N6p5xLxZ9SsPW9jrsF_7Sh9Z2N6kyCtM5pL5MW=
122lFQ7hJpknf4vK4Y-04 )

Fully Patched Version: 3.18.2

The Elementor Website Builder plugin for WordPress is vulnerable to Remote =
Code Execution via file upload in all versions up to and including 3.18.1 v=
ia the template import functionality. This makes it possible for authentica=
ted attackers, with contributor-level access and above, to upload files and=
 execute code on the server. Technical Analysis The source of the issue is =
the handle_elementor_upload function called by the import_template Elemento=
r AJAX function, which is accessible to Contributor-level users and above. =
Although it uses file type validation, vulnerable versions first save the u=
ploaded file to a temporary directory before checking the file type, and do=
 not delete the temporary file if it fails this validation:

public function handle_elementor_upload( array $file, $allowed_file_extensi=
ons =3D null ) {

// If $file['fileData'] is set, it signals that the passed file is a Base64=
 string that needs to be decoded and

// saved to a temporary file.

if ( isset( $file['fileData'] ) ) {

$file =3D $this->save_base64_to_tmp_file( $file );

}

$validation_result =3D $this->validate_file( $file, $allowed_file_extension=
s );

if ( is_wp_error( $validation_result ) ) {

return $validation_result;

}

return $file;

}

This means that contributors with access to the Elementor editor could uplo=
ad files of any type and they will be saved in a temporary directory with a=
 randomized name. While attackers exploiting versions before 3.18.1 could u=
se directory traversal to move the uploaded file into a more predictable lo=
cation, the 3.18.1 partial patch sanitized the filename, meaning that it co=
uld only be uploaded directly to the temporary directory.

Since the exploit returns a 500 error and provides no feedback on the locat=
ion of the temporary directory, attackers would have difficulty finding the=
 uploaded file unless directory indexing was enabled on the server, which i=
s no longer common due to the many security risks it presents.

Conclusion

In today's PSA, we covered a file upload vulnerability in Elementor affecti=
ng versions 3.18.1 and earlier. We strongly recommend updating to the lates=
t version of Elementor, which is 3.18.2 as of this writing, as soon as poss=
ible, as this is a high-severity vulnerability which can be used by attacke=
rs to upload files and take control of a site.

All Wordfence users, including those running Wordfence Premium (https://ema=
il.wordfence.com/e3t/Ctc/GC+113/cwG7R04/VX3hvn72Dfz1W7ByXrv1zyVLZW8QwHkG56Q=
9XQN1xVmZM3prCCW7Y8-PT6lZ3lDW3hd_lw1KY00CW3Jkdd13dWh6MW53dPc72hkL_fW4ptlss5=
MdlYrW5WXKQ62k_cMwW3Mz0Dn5-wMY0W29V9Cq8h1HNJN49-pLMLYLsTW7nP6G88XQ1KKW4tlqT=
X7XK6GGW3hGmJh58vBFbW2d0KXJ93Cj9TW97ww1N78zwqtW3jG5FM3hLV9CW8Kbbgj2WWqYBW4T=
lSZP6WdKqjW3cNbBH8LDnyFW6FKrRH3XwjlJW1rZSkd5gPnPpW6wYSkg2t0b2mVNFY6G3_n0pCW=
3slm6Z8m7C7JW6tF7VH85C3dpW5-dk4y3-D39sVpzx1-78pVJwW5q07-C4TJzHsf7Vks6-04 ) =
, Wordfence Care (https://email.wordfence.com/e3t/Ctc/GC+113/cwG7R04/VX3hvn=
72Dfz1W7ByXrv1zyVLZW8QwHkG56Q9XQN1xVmZM3prCCW7Y8-PT6lZ3nDW1LRdfD2Km9wHW7kHb=
Kb43q17QW5J_KJW3K8FN4W3Pp3Q627y9xKW2hG28l44PN6ZW1y0rD992TvxGW815Fb07Y-jxfW7=
MtcHJ4XV4qvW8WQ1wh4NG6jVW1Wn3Nj6wVMZzW8qS0ff8s8kjVW8fwcyP4Xgmf4W51vTjW7MkfJ=
4VKvKgx8pMb0NW7Z7zNh55dB-9W57XK8q472Y_mW1y--rz6jxBFkW1-8FJV77_PFbW8nzjPY4Js=
VCRW3V-hvR4V8bCkW5YLFyf38bwfnW8Mjk1w5VkTG8W5clLG_8YBCxKW98wTfV1Kx8xFW3kNLB0=
6q6vGdW40svwt55C-5Hf8FRYQK04 ) , and Wordfence Response, (https://email.wor=
dfence.com/e3t/Ctc/GC+113/cwG7R04/VX3hvn72Dfz1W7ByXrv1zyVLZW8QwHkG56Q9XQN1x=
VmZM3prCCW7Y8-PT6lZ3lwW2hH0Lh3BCDNmW7Y282N3LZC9dW1TY3k42xD9dpW4QnG8Y5mWvwcN=
18j24QvS8s2W2jV4f53g4LqFMLTFkXVm3qRW6_QTJp9hPX2DW8-G7F96WnQ6gW47xttb97bR_FW=
9cKNZZ5pBQTlVNQ_v9845rb_W8JK7yM5Gb6gNW9cTSCL81CnK6W3fKBxM5Znw50W4P3N5Z2TyKZ=
FW8ZMTHY6BwJVdW7_vZ-g1NC_RxW7b5WD-4vPcMWW7TWvnp8ch8LjV3MCwm6r0ltRVW5yM94qNF=
gDW8WZZ1x6CQbn_W3yrGFC6QC0jmW60NTkt7pvW1zN2lrkB77pLH1f4PCpHn04 )  are fully=
 protected against this vulnerability.

If you know someone who uses this plugin on their site, we recommend sharin=
g this advisory with them to ensure their site remains secure, as this vuln=
erability poses a significant risk.

Did you know that Wordfence has a Bug Bounty Program (https://email.wordfen=
ce.com/e3t/Ctc/GC+113/cwG7R04/VX3hvn72Dfz1W7ByXrv1zyVLZW8QwHkG56Q9XQN1xVmZM=
3prCCW7Y8-PT6lZ3phV--Qbw1tR57mN7bgrk-qS4sVW380Tw_7-K2SXW6lrqRd2mJPqZW89Yc15=
276rCLN51LBK5qtc49W4m509h407gmtVjnCFs8RvFbvW7GZh_Y2J88v_W51q1QZ3bwxzhW7DJDv=
M6m1pDRW5JtkMX48T0H_W47nNzQ6QJzfdW1vQ72s7H7PQcW7YDj3W6BZf8BVlt8rW1-vjMQW6f4=
nxT3G-6MGW94YNxj3FRd0xW8vptGV521TKlW4MgYdJ5Dd_PJW6YyPXt28Z57rW29vyYr38_2ZlW=
8dHV6r6Kkwl6W3YQfnS7QkC_3W89P5FJ15Bd-kW34Z91z8bMf38f2Mx8rK04 ) ? We=E2=80=
=99ve recently increased our bounties by 6.25x until December 20th, 2023, w=
ith our bounties for the most critical vulnerabilities reaching $10,000 USD=
! If you=E2=80=99re an aspiring or current vulnerability researcher, click =
here to sign up. (https://email.wordfence.com/e3t/Ctc/GC+113/cwG7R04/VX3hvn=
72Dfz1W7ByXrv1zyVLZW8QwHkG56Q9XQN1xVmZM3prCCW7Y8-PT6lZ3mfN4yWQh35R145W8fQBZ=
83szf4FN7Pqb6ZtfJn3W352dRd6T9f1kW2P_k1v69C3PzW4f-rT71mJ6HHW6bR4081D-11YW7Wq=
NS57C2bczW2mk5Bz72p2ZtW6dvDL24xMQBJW7slCYm5rRFwdW5qS1Dw9g3ptXN6DfKmvMbpK2W1=
RS0YX5W-qZ6W5ltpMx5Cc_6DW7qzv0k1m2qZfW7xHkvW97rNdZW1Z7bqc28PzYqW1tFplJ8xvTH=
CW2Zcygh77fDXkW8pGS0Z8K5hVFN4fSj8VS3zfyW1LmJfs26Jv3TW9f3NFL30hwGkW79ByY16g2=
V5fW1qhbgK4NCp0sf8RCMpY04 )

The Full Product Lineup

wf-stacked-free-1 (https://email.wordfence.com/e3t/Ctc/GC+113/cwG7R04/VX3hv=
n72Dfz1W7ByXrv1zyVLZW8QwHkG56Q9XQN1xVmZM3prCCW7Y8-PT6lZ3mPW1PKTgL16__QbW3DY=
WQh36DxRWF4vRBBjWdSWN7JJnPVdWGJkW2yqLBZ8zT7JcW3QVSHn8CvKftW2RtM_m5v29_XW7Fd=
xBB1_K3dcVDMXtp8gnkqYV1hMw07GF04tW1FTBXq8gxRYVW1HTQfl1xnB-1W5GRF3Z3z1wvhVNt=
GWT1_vRvZW86vSQX4tmhtWW5x1tvr6BKbXPW8R34sz6nWNbbW4J4ykL84r3jrW4SJTRP522D3CW=
399T7Q772MslN1hgztHfzn5nW3RJq_R2tfjFKW7j0Xjq2X810DW2BVTgL3qwq-NN4tTvZkV3p9V=
W2_hBFk1G3tlFf3wT3Hx04 )

wf-stacked-premium-1 (https://email.wordfence.com/e3t/Ctc/GC+113/cwG7R04/VX=
3hvn72Dfz1W7ByXrv1zyVLZW8QwHkG56Q9XQN1xVmZM3prCCW7Y8-PT6lZ3n9W5V99QN1SfGkDW=
3xzSn04dk6GTW8HQr816H_7-JN2tM4dYsg7SPW7M632-3jTFGPW3JMp-K7vT-GcN1NZnCHwqdbF=
W43XYC94rlYGXW4J2Rz_7bS_k2W4JjXG45b_SXJW3kVF5p3s5Yp0N4zjcdKzRgL5W7_xcZ92-2q=
QlN7Sw3QPq3wfWW6FpXJj5K6NT8W5jbDBp28YG3pW1Vnh3L5Rw-y7VJVjdR26t4TdW2xD1Q-9jt=
RGdW6P5z_Y5knJVFW8lK0BP6JK-hyW3B7GGl1ZhxZHW6g1rSB295BHgMZb7rTJ1BW_W75Glp84P=
45FlN2NhFW-f3t58f4yxbbd04 )

wf-stacked-care-3 (https://email.wordfence.com/e3t/Ctc/GC+113/cwG7R04/VX3hv=
n72Dfz1W7ByXrv1zyVLZW8QwHkG56Q9XQN1xVmZM3prCCW7Y8-PT6lZ3q6W1VNKDJ5_JFcvW71X=
nzb2svBGPW9l_qZs5xNlVRW5SPKnL3P7g8CW8FBrwY16dg2CVcz0x83HhsWZW61-dcv6bXCZhW1=
3MYCv733TqRW93BGpB7n-T-0W7sRHyW8Fb7TCW4dBPZK7rHkvxN7BM_KPGZwWpW5yphmd394d5f=
N6hr1wJy8gDTW1hzSXl3WJprDN7zqBJfQPDMZW2j9Xgv1GmlxdW4BFC8J7TkFj-W7ZyWv93rczw=
qW3D-6Hz6-frYBW8jlPqF90D85nW8NP0nN6r6fjPW2qPzKL6zYwvCMQpkKCMLlMnW4gPFl71CVf=
zLVQMrp123gMVxf3XjCwz04 )

wf-stacked-response-2 (https://email.wordfence.com/e3t/Ctc/GC+113/cwG7R04/V=
X3hvn72Dfz1W7ByXrv1zyVLZW8QwHkG56Q9XQN1xVmZM3prCCW7Y8-PT6lZ3lwW2hH0Lh3BCDNm=
W7Y282N3LZC9dW1TY3k42xD9dpW4QnG8Y5mWvwcN18j24QvS8s2W2jV4f53g4LqFMLTFkXVm3qR=
W6_QTJp9hPX2DW8-G7F96WnQ6gW47xttb97bR_FW9cKNZZ5pBQTlVNQ_v9845rb_W8JK7yM5Gb6=
gNW9cTSCL81CnK6W3fKBxM5Znw50W4P3N5Z2TyKZFW8ZMTHY6BwJVdW7_vZ-g1NC_RxW7b5WD-4=
vPcMWW7TWvnp8ch8LjV3MCwm6r0ltRVW5yM94qNFgDW8WZZ1x6CQbn_W3yrGFC6QC0jmW60NTkt=
7pvW1zN2lrkB77pLH1f4PCpHn04 )

wf-stacked-cli (https://email.wordfence.com/e3t/Ctc/GC+113/cwG7R04/VX3hvn72=
Dfz1W7ByXrv1zyVLZW8QwHkG56Q9XQN1xVmZM3prCCW7Y8-PT6lZ3kXV_c88F1mg9QMN3xqN1_9=
MhW-W96K81m7KqcM3VDg58r4RvD2FVtb_6G4m6nBcW7mzc542kS9QjW5w7s8q75glnQW1HBDk21=
nbpHkW4sSV1s7j1jgmVkgvyr3dbdTJW3H2_DD8rlPN6W3rxHq361rwWhN3X1XNmrrnMnW6-YGf-=
2lnS47W7tz6K75M2K0YW5lQlXD5W44nzVYPK0213C-P6W3q3-Rj5grJPKN1bdMlk7p9C3W3pQQl=
n2pMdvPW4_CZnH2vQBc9W1LhBLJ2xz8zBVJb9Mw2mR9rcW7gsrwl7t3F5dW8BNN4r3zNlrnW54p=
VQt2h4Nd-f1RWj5l04 )

wf-stacked-intelligence (https://email.wordfence.com/e3t/Ctc/GC+113/cwG7R04=
/VX3hvn72Dfz1W7ByXrv1zyVLZW8QwHkG56Q9XQN1xVmZs3prCCW7lCdLW6lZ3p9W5GbjhJ6NQs=
STW7VHyTB4TgYxhW76jZFZ92_bNDW6k1_r23TmVHGW4qZcDc90ZNh2W5R1VtR7Dw9N1W1dy3w19=
gjz30W1hDFLw6tWpTMW4SVQJb1Bs21fVcY0MY1Mhg3LVXmx5J8Cqr0rW8KvFgX579NkmW6HFrs3=
8rM27BW8dVYMC6rcVk7W8Q-ljZ969TdcW2GjlT-3JY4ZTW2B474y1fv3wMW98gTt02T6Q5qW2n3=
74Q5sP2cvW44Ps7p8qqBlvW4zbD1B9bdNwgW3z0NhG57Mc5xW862Nh926wHsvW6RSm8R6bjJXBf=
8FfQ8R04 )

logo-defiant (https://email.wordfence.com/e3t/Ctc/GC+113/cwG7R04/VX3hvn72Df=
z1W7ByXrv1zyVLZW8QwHkG56Q9XQN1xVmZ83prCCW6N1vHY6lZ3n1W3Gqc-C62w2lpW4QYzm75c=
CWkNN8N3WgRMBQTwW7D248d5jyTVdW8xnvFs3wx07NW1VrfXC44dn32W3ZKfvQ5RJxjdW7M0Rsh=
91yr5gW5StRXs583Qp0W4jsdl-3tB2C3W4RxT7f1HbS-sW52JZs84R1yklW6FlzhV2vWY1rN3tn=
m-w707SjN8slspJlkklWW35cg3x3q2b6tW2JV_gN8SkP6zW7CFMlC61Gt7QW4_-GM11ckCyPMt9=
1bC7PSC7W3hw2tR7KQbG1W3M4sb98VP5G2f7ZRJBl04 )

Defiant, Inc., 1700 Westlake Ave N STE 200

Seattle, WA  98109 United States

Unsubscribe (https://email.wordfence.com/hs/manage-preferences/unsubscribe-=
all?languagePreference=3Den&d=3DVnbTNd892TtnVCnbkg45v0QyW3_X4wv3SXQ-tW4h29f=
m6J4V3XVmWFg54RqnGQN4W4Q9025yk1W4L-ZJg8RZTv5VWH6nf7w_Gy0MXk_7QbvXngW6frwCX4=
Hlr7qW3J6DgB3dyQsv3d612&v=3D3&_hsenc=3Dp2ANqtz-9aRWfQkgfHeqZM4x4b4vf-HUywlX=
ZTo-9oBaRbL_5N_-kyv7BM8ZCmRjvX6WiREFdbWuatwCvpuS6_YZ9rJB4lq_viHg&_hsmi=3D28=
5745251 ) Manage Preferences (https://email.wordfence.com/hs/manage-prefere=
nces/unsubscribe?languagePreference=3Den&d=3DVnbTNd892TtnVCnbkg45v0QyW3_X4w=
v3SXQ-tW4h29fm6J4V3XVmWFg54RqnGQN4W4Q9025yk1W4L-ZJg8RZTv5VWH6nf7w_Gy0MXk_7Q=
bvXngW6frwCX4Hlr7qW3J6DgB3dyQsv3d612&v=3D3&_hsenc=3Dp2ANqtz-9aRWfQkgfHeqZM4=
x4b4vf-HUywlXZTo-9oBaRbL_5N_-kyv7BM8ZCmRjvX6WiREFdbWuatwCvpuS6_YZ9rJB4lq_vi=
Hg&_hsmi=3D285745251 )

ISO_27001 (https://email.wordfence.com/e3t/Ctc/GC+113/cwG7R04/VX3hvn72Dfz1W=
7ByXrv1zyVLZW8QwHkG56Q9XQN1xVmZ83prCCW6N1vHY6lZ3mSW3rr1HY6st9ClW1rx7t55L-Gx=
_W1pKyyt7RRyPNW1yyLTS8bxs6PW8d_57X4nm1ktW99DvYj90dTPzW1KrvJX6ytTn3W5bhKCS6F=
KXg9W5251Q71CtGYTVHBQ-p3L-3LZN2R2QDdczPZQW67CXMC1lQb6CW6nBPLy25tq2mW3d_5wk3=
Dc0_BW3f4Pg18gYfF2W2VQwzZ8_BSbTW4wQZSV5CxV9VW9dNdDN8j18D0W7CJnY91PP5ZgW2DZ3=
RD2W760qVszW4D7GS9pCW2k4wZq4M9fW6f7WnLs-04 )

You're receiving this email because you signed up to the Wordfence WordPres=
s security mailing list.
------=_Part_8854552_2021019539.1702045779886
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional //EN" "http://www=
.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns=3D"http://www.w3=
.org/1999/xhtml" xmlns:o=3D"urn:schemas-microsoft-com:office:office" xmlns:=
v=3D"urn:schemas-microsoft-com:vml" lang=3D"en"><head>
    <title>[WordPress Security] PSA: High Severity File Upload Vulnerabilit=
y in Elementor Patched</title>
    <meta property=3D"og:title" content=3D"[WordPress Security] PSA: High S=
everity File Upload Vulnerability in Elementor Patched">
    <meta name=3D"twitter:title" content=3D"[WordPress Security] PSA: High =
Severity File Upload Vulnerability in Elementor Patched">
   =20
   =20
   =20
<meta name=3D"x-apple-disable-message-reformatting">
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3DUTF-8">
<meta http-equiv=3D"X-UA-Compatible" content=3D"IE=3Dedge">
<meta name=3D"viewport" content=3D"width=3Ddevice-width, initial-scale=3D1.=
0">
    <!--[if gte mso 9]>
  <xml>
      <o:OfficeDocumentSettings>
      <o:AllowPNG/>
      <o:PixelsPerInch>96</o:PixelsPerInch>
      </o:OfficeDocumentSettings>
  </xml>
 =20
  <style>
    ul > li {
      text-indent: -1em;
    }
  </style>
<![endif]-->
<!--[if mso]>
<style type=3D"text/css">
 body, td {font-family: Arial, Helvetica, sans-serif;}
 .hse-body-wrapper-table {background-color: #FFFFFF;padding: 20px 0 !import=
ant}
</style>
<![endif]-->
   =20
     =20
   =20
  <meta name=3D"generator" content=3D"HubSpot"><meta property=3D"og:url" co=
ntent=3D"https://email.wordfence.com/-temporary-slug-3df29f3d-02a0-4899-bc4=
7-37f5dcb6c8fd"><meta name=3D"robots" content=3D"noindex,follow"><!--[if !(=
(mso)|(IE))]><!-- --><style type=3D"text/css">.moz-text-html .hse-column-co=
ntainer{max-width:600px !important;width:600px !important}
.moz-text-html .hse-column{display:table-cell;vertical-align:top}.moz-text-=
html .hse-section .hse-size-4{max-width:200px !important;width:200px !impor=
tant}
.moz-text-html .hse-section .hse-size-8{max-width:400px !important;width:40=
0px !important}
.moz-text-html .hse-section .hse-size-12{max-width:600px !important;width:6=
00px !important}
@media only screen and (min-width:640px){.hse-column-container{max-width:60=
0px !important;width:600px !important}
.hse-column{display:table-cell;vertical-align:top}.hse-section .hse-size-4{=
max-width:200px !important;width:200px !important}
.hse-section .hse-size-8{max-width:400px !important;width:400px !important}=
.hse-section .hse-size-12{max-width:600px !important;width:600px !important=
}
}@media only screen and (max-width:639px){img.stretch-on-mobile,.hs_rss_ema=
il_entries_table img,.hs-stretch-cta .hs-cta-img{height:auto !important;wid=
th:100% !important}
.display_block_on_small_screens{display:block}.hs_padded{padding-left:20px =
!important;padding-right:20px !important}
}</style><!--<![endif]--><style type=3D"text/css">#hs_body #hs_cos_wrapper_=
main a[x-apple-data-detectors]{color:inherit !important;text-decoration:non=
e !important;font-size:inherit !important;font-family:inherit !important;fo=
nt-weight:inherit !important;line-height:inherit !important}
a{text-decoration:underline}p{margin:0}body{-ms-text-size-adjust:100%;-webk=
it-text-size-adjust:100%;-webkit-font-smoothing:antialiased;moz-osx-font-sm=
oothing:grayscale}</style></head>
  <body id=3D"hs_body" bgcolor=3D"#FFFFFF" style=3D"margin:0 !important; pa=
dding:0 !important; font-family:Arial, sans-serif; font-size:15px; color:#5=
25355; word-break:break-word">
    <div id=3D"preview_text" style=3D"display:none;font-size:1px;color:#FFF=
FFF;line-height:1px;max-height:0px;max-width:0px;opacity:0;overflow:hidden;=
">High severity file upload vulnerability that can be use for remote code e=
xecution patched in Elementor.</div>
   =20
<!--[if gte mso 9]>
<v:background xmlns:v=3D"urn:schemas-microsoft-com:vml" fill=3D"t">
    <v:fill type=3D"tile" size=3D"100%,100%" color=3D"#ffffff"/>
</v:background>
<![endif]-->
    <div class=3D"hse-body-background" style=3D"background-color:#ffffff" b=
gcolor=3D"#ffffff">
      <table role=3D"presentation" class=3D"hse-body-wrapper-table" cellpad=
ding=3D"0" cellspacing=3D"0" style=3D"border-spacing:0 !important; border-c=
ollapse:collapse; mso-table-lspace:0pt; mso-table-rspace:0pt; margin:0; pad=
ding:0; width:100% !important; min-width:320px !important; height:100% !imp=
ortant" width=3D"100%" height=3D"100%">
        <tbody><tr>
          <td class=3D"hse-body-wrapper-td" valign=3D"top" style=3D"border-=
collapse:collapse; mso-line-height-rule:exactly; font-family:Arial, sans-se=
rif; font-size:15px; color:#525355; word-break:break-word">
            <div id=3D"hs_cos_wrapper_main" class=3D"hs_cos_wrapper hs_cos_=
wrapper_widget hs_cos_wrapper_type_dnd_area" style=3D"color: inherit; font-=
size: inherit; line-height: inherit;" data-hs-cos-general-type=3D"widget" d=
ata-hs-cos-type=3D"dnd_area">  <div id=3D"section-0" class=3D"hse-section h=
se-section-first" style=3D"padding-left:10px; padding-right:10px; padding-t=
op:20px">
   =20
   =20
    <!--[if !((mso)|(IE))]><!-- -->
      <div class=3D"hse-column-container hse-border hse-border-top" style=
=3D"min-width:280px; max-width:600px; width:100%; Margin-left:auto; Margin-=
right:auto; border-collapse:collapse; border-spacing:0; border-left:0px sol=
id #008cc1; border-right:0px solid #008cc1; box-sizing:border-box; border-t=
op:0px solid #008cc1; background-color:#FFFFFF" bgcolor=3D"#FFFFFF">
    <!--<![endif]-->
   =20
    <!--[if (mso)|(IE)]>
      <div class=3D"hse-column-container" style=3D"min-width:280px;max-widt=
h:600px;width:100%;Margin-left:auto;Margin-right:auto;border-collapse:colla=
pse;border-spacing:0;">
      <table align=3D"center" style=3D"border-collapse:collapse;mso-table-l=
space:0pt;mso-table-rspace:0pt;width:600px;border-left:0px solid #008CC1;bo=
rder-right:0px solid #008CC1;border-top:0px solid #008CC1" cellpadding=3D"0=
" cellspacing=3D"0" role=3D"presentation" class=3D"hse-border hse-border-to=
p" width=3D"600" bgcolor=3D"#FFFFFF">
      <tr style=3D"background-color:#FFFFFF;">
    <![endif]-->
    <!--[if (mso)|(IE)]>
  <td valign=3D"top" style=3D"width:600px;">
<![endif]-->
<!--[if gte mso 9]>
  <table role=3D"presentation" width=3D"600" cellpadding=3D"0" cellspacing=
=3D"0" style=3D"border-collapse:collapse;mso-table-lspace:0pt;mso-table-rsp=
ace:0pt;width:600px">
<![endif]-->
<div id=3D"column-0-0" class=3D"hse-column hse-size-12">
  <div id=3D"hs_cos_wrapper_module-0-0-0" class=3D"hs_cos_wrapper hs_cos_wr=
apper_widget hs_cos_wrapper_type_module" style=3D"color: inherit; font-size=
: inherit; line-height: inherit;" data-hs-cos-general-type=3D"widget" data-=
hs-cos-type=3D"module"><table class=3D"hse-image-wrapper" role=3D"presentat=
ion" width=3D"100%" cellpadding=3D"0" cellspacing=3D"0" style=3D"border-spa=
cing:0 !important; border-collapse:collapse; mso-table-lspace:0pt; mso-tabl=
e-rspace:0pt">
  <tbody>
    <tr>
      <td class=3D"hs_padded" align=3D"center" valign=3D"top" style=3D"bord=
er-collapse:collapse; mso-line-height-rule:exactly; font-family:Arial, sans=
-serif; color:#525355; word-break:break-word; text-align:center; padding:10=
px 20px; font-size:0px">
        <a href=3D"https://email.wordfence.com/e3t/Ctc/GC+113/cwG7R04/VX3hv=
n72Dfz1W7ByXrv1zyVLZW8QwHkG56Q9XQN1xVmZ83qgyTW6N1vHY6lZ3nGN7Wp612HZxYCW3N3L=
3_5qYxlXW3MQ8N57rxC6PW4QtP9m2xfxX3W11Z6DR7NfFYhW9m2G9G19GdSTW44NqvM96H0RbW8=
9mzN291nKTwVP9fdn2GYFF1W6tSDp13pw4bRW6JJjXg85WkR8N7t7hpWX64QxW4bMl_h5YWlzbW=
4k76cR7-ZyXTW54PLvl4VgpScW2nJQQk6l-WYLW5Bbqtl3XvQWyW5nLP-l2xMMNQN5hZkBj_g2z=
TW4vqSz78Td3dxW44Zxjw5xbzbwN62-S9NYg_WRf2l_6NP04" target=3D"_blank" style=
=3D"color:#00a4bd; mso-line-height-rule:exactly" data-hs-link-id=3D"0">
        <img alt=3D"Wordfence-Logo.png" src=3D"https://email.wordfence.com/=
hs-fs/hubfs/Logos/Wordfence-Logo.png.png?width=3D600&amp;upscale=3Dtrue&amp=
;name=3DWordfence-Logo.png.png" style=3D"outline:none; text-decoration:none=
; -ms-interpolation-mode:bicubic; border:none; max-width:100%; font-size:16=
px" width=3D"300" align=3D"middle" srcset=3D"https://email.wordfence.com/hs=
-fs/hubfs/Logos/Wordfence-Logo.png.png?upscale=3Dtrue&amp;width=3D600&amp;u=
pscale=3Dtrue&amp;name=3DWordfence-Logo.png.png 300w, https://email.wordfen=
ce.com/hs-fs/hubfs/Logos/Wordfence-Logo.png.png?upscale=3Dtrue&amp;width=3D=
1200&amp;upscale=3Dtrue&amp;name=3DWordfence-Logo.png.png 600w" sizes=3D"(m=
ax-width: 300px) 100vw, 300px">
        </a>
      </td>
    </tr>
  </tbody>
</table></div>
</div>
<!--[if gte mso 9]></table><![endif]-->
<!--[if (mso)|(IE)]></td><![endif]-->
    <!--[if (mso)|(IE)]></tr></table><![endif]-->
    </div>
  =20
  </div>
  <div id=3D"section-1" class=3D"hse-section" style=3D"padding-left:10px; p=
adding-right:10px">
   =20
   =20
    <!--[if !((mso)|(IE))]><!-- -->
      <div class=3D"hse-column-container hse-border" style=3D"min-width:280=
px; max-width:600px; width:100%; Margin-left:auto; Margin-right:auto; borde=
r-collapse:collapse; border-spacing:0; border-left:0px solid #008cc1; borde=
r-right:0px solid #008cc1; box-sizing:border-box; background-color:#FFFFFF"=
 bgcolor=3D"#FFFFFF">
    <!--<![endif]-->
   =20
    <!--[if (mso)|(IE)]>
      <div class=3D"hse-column-container" style=3D"min-width:280px;max-widt=
h:600px;width:100%;Margin-left:auto;Margin-right:auto;border-collapse:colla=
pse;border-spacing:0;">
      <table align=3D"center" style=3D"border-collapse:collapse;mso-table-l=
space:0pt;mso-table-rspace:0pt;width:600px;border-left:0px solid #008CC1;bo=
rder-right:0px solid #008CC1" cellpadding=3D"0" cellspacing=3D"0" role=3D"p=
resentation" class=3D"hse-border" width=3D"600" bgcolor=3D"#FFFFFF">
      <tr style=3D"background-color:#FFFFFF;">
    <![endif]-->
    <!--[if (mso)|(IE)]>
  <td valign=3D"top" style=3D"width:600px;">
<![endif]-->
<!--[if gte mso 9]>
  <table role=3D"presentation" width=3D"600" cellpadding=3D"0" cellspacing=
=3D"0" style=3D"border-collapse:collapse;mso-table-lspace:0pt;mso-table-rsp=
ace:0pt;width:600px">
<![endif]-->
<div id=3D"column-1-0" class=3D"hse-column hse-size-12">
  <div id=3D"hs_cos_wrapper_module-1-0-0" class=3D"hs_cos_wrapper hs_cos_wr=
apper_widget hs_cos_wrapper_type_module" style=3D"color: inherit; font-size=
: inherit; line-height: inherit;" data-hs-cos-general-type=3D"widget" data-=
hs-cos-type=3D"module"><table class=3D"hse-image-wrapper" role=3D"presentat=
ion" width=3D"100%" cellpadding=3D"0" cellspacing=3D"0" style=3D"border-spa=
cing:0 !important; border-collapse:collapse; mso-table-lspace:0pt; mso-tabl=
e-rspace:0pt">
  <tbody>
    <tr>
      <td class=3D"hs_padded" align=3D"center" valign=3D"top" style=3D"bord=
er-collapse:collapse; mso-line-height-rule:exactly; font-family:Arial, sans=
-serif; color:#525355; word-break:break-word; text-align:center; padding:10=
px 20px; font-size:0px">
        <a href=3D"https://email.wordfence.com/e3t/Ctc/GC+113/cwG7R04/VX3hv=
n72Dfz1W7ByXrv1zyVLZW8QwHkG56Q9XQN1xVmYg5nR32W50kH_H6lZ3k_W3strfn2HnHvnW9jB=
8Gm3zTfvRW4klWyv4b9zzwW2Ft_D_9kFyMmW1NbG-24fTmPGW4t3Ddp1SjSZhW33pCFc7cWHV4W=
5t1d058nPgVgW2c8N6Y4jWW1PN4KCXWjyHT1kW3VyllK6gjdjxW7dHMFX1lNzSdW89DhRv5DcdC=
8W73BGn12ZnbrhW7l8q6T2309BvW2DLfNj5dVL_TW2wXVs16pBrynW3dbZwq6tWjWXW7d8BBd3q=
Y0BKW30fGdr9j7h2rDXl2TWr3PWW3khzLB6wKGF2W1-PFwx16LNgmV3YJLJ8crK_bW6PvPsP6_7=
zd5W1_vVjY6fzj40W1T_7Xx649sW2W8BkSC24JFgPrW7b60sV4NNW6xW4wd8zz262LZBW3Lr6fH=
2zDLzyW1dBl2Z8b0HtVf6NgkQP04" target=3D"_blank" style=3D"color:#00a4bd; mso=
-line-height-rule:exactly" data-hs-link-id=3D"0">
        <img alt=3D"FeaturedImage_Wordfence_63.022" src=3D"https://email.wo=
rdfence.com/hs-fs/hubfs/FeaturedImage_Wordfence_63.022.png?width=3D1120&amp=
;upscale=3Dtrue&amp;name=3DFeaturedImage_Wordfence_63.022.png" style=3D"out=
line:none; text-decoration:none; -ms-interpolation-mode:bicubic; border:non=
e; max-width:100%; font-size:16px" width=3D"560" align=3D"middle" srcset=3D=
"https://email.wordfence.com/hs-fs/hubfs/FeaturedImage_Wordfence_63.022.png=
?upscale=3Dtrue&amp;width=3D1120&amp;upscale=3Dtrue&amp;name=3DFeaturedImag=
e_Wordfence_63.022.png 560w, https://email.wordfence.com/hs-fs/hubfs/Featur=
edImage_Wordfence_63.022.png?upscale=3Dtrue&amp;width=3D2240&amp;upscale=3D=
true&amp;name=3DFeaturedImage_Wordfence_63.022.png 1120w" sizes=3D"(max-wid=
th: 560px) 100vw, 560px">
        </a>
      </td>
    </tr>
  </tbody>
</table></div>
<table role=3D"presentation" cellpadding=3D"0" cellspacing=3D"0" width=3D"1=
00%" style=3D"border-spacing:0 !important; border-collapse:collapse; mso-ta=
ble-lspace:0pt; mso-table-rspace:0pt"><tbody><tr><td class=3D"hs_padded" st=
yle=3D"border-collapse:collapse; mso-line-height-rule:exactly; font-family:=
Arial, sans-serif; font-size:15px; color:#525355; word-break:break-word; pa=
dding:10px 20px"><div id=3D"hs_cos_wrapper_module-1-0-1" class=3D"hs_cos_wr=
apper hs_cos_wrapper_widget hs_cos_wrapper_type_module" style=3D"color: inh=
erit; font-size: inherit; line-height: inherit;" data-hs-cos-general-type=
=3D"widget" data-hs-cos-type=3D"module"><div id=3D"hs_cos_wrapper_module-1-=
0-1_" class=3D"hs_cos_wrapper hs_cos_wrapper_widget hs_cos_wrapper_type_ric=
h_text" style=3D"color: inherit; font-size: inherit; line-height: inherit;"=
 data-hs-cos-general-type=3D"widget" data-hs-cos-type=3D"rich_text"><p styl=
e=3D"mso-line-height-rule:exactly; line-height:175%">On December 6, 2023, t=
he Wordfence team noticed a changelog entry for version 3.18.1 of Elementor=
, a WordPress plugin installed on nearly 9 million sites. We did not discov=
er the original vulnerability and only became aware of it after reviewing t=
he changelog containing a partial patch. We immediately released a firewall=
 rule to <a href=3D"https://email.wordfence.com/e3t/Ctc/GC+113/cwG7R04/VX3h=
vn72Dfz1W7ByXrv1zyVLZW8QwHkG56Q9XQN1xVmZM3qgyTW7Y8-PT6lZ3n2W7XhlqS4Ls8XPW4B=
sJ9c3y9xxdVvGV3Y4qRQ7-W4yfjf45jHcscW1svlBs5tYJd6W77D7-Z1XVsXKW14ZByR8TpsbRW=
5JCDmg5mF7VCW4NZn3344bm4xW6mYFtC5T4JgkW29dyQq87dYS0VJhQbC7DM1j8W6jXF_C598Y9=
RW4zcpkj8k5mDGW41YP9_7BwL8KW4MK_yx2YxDCwW43l6X7802G8MW8bz9dp4sNsG0W2XKg9Z1X=
nV8jW9lXXGN5ZFd0SW8D97JF4lJLPkW7xQwJW7nVm72W2MQ-Yf16KL3kN5QrPQX23PGKW6NPjms=
4CsLY-W5_30RJ31skrVf8DY8Qg04" target=3D"_blank" rel=3D"noopener" style=3D"c=
olor:#00a4bd; mso-line-height-rule:exactly" data-hs-link-id=3D"0">Wordfence=
 Premium</a>, <a href=3D"https://email.wordfence.com/e3t/Ctc/GC+113/cwG7R04=
/VX3hvn72Dfz1W7ByXrv1zyVLZW8QwHkG56Q9XQN1xVmZM3qgyTW7Y8-PT6lZ3nPW74lCVb3BRJ=
xhW4yh6BB73sBB5W4xdHBs5Q9c9PW5Tx5M-9bJz2hW6dh64n48BH7gW4HyFYv89-VKpW86XsS84=
yLCMFVq2NC36pK7pnW3TD35x3tv57jW3H3fPr6gFxzmW1Gcykx4T2J7vW6vmx5-57J2c2W7qmv6=
q7PlbM1V_CWcK3zYhTsVZNjdz4zc3DyW1qjTzS3_XVH_W62NStc3NhWtsW3knNbl7VN3ttW3mq1=
xD3zLzzXW2my56v91NFn4W6MX6WR368fQNW2Y3XnP6H4PzcV46Xr74k2ttgW3tQNn53SGrn9N3k=
17z4HPfNJW53-tPC48-7k_f6MdzRC04" target=3D"_blank" rel=3D"noopener" style=
=3D"color:#00a4bd; mso-line-height-rule:exactly" data-hs-link-id=3D"0">Word=
fence Care</a>, and <a href=3D"https://email.wordfence.com/e3t/Ctc/GC+113/c=
wG7R04/VX3hvn72Dfz1W7ByXrv1zyVLZW8QwHkG56Q9XQN1xVmZM3qgyTW7Y8-PT6lZ3q5W8PsZ=
z53QhG4gW7Vzpz98Gn74LW3J5DHt1FBP2nW7Vbv9q6cZr4kW3lpxsQ4YP0lKW6kRPd39ckMJXW7=
0cPld3y8fTzW71g12Q7MKfXWW2S-mMS4n61XmW53hC4V90Jhw3VQPLwb5xS3hHW7vMsGk5Q31yf=
W492nS56H4Vb7W3RXmDv1PXh5sW84DsF78_ldDyW3Jyyx_2s37B1W19JTTj5nF87-W2LHlwQ1Yv=
W5-W49c9v62sXlXfW7xQ8_66d-4q4W3X1lSV4R9Y6-W3qD7CQ29GfPKW9f4PjH6kRxyPV3GpX23=
YvYgJVTTqMq354-zkW8gk-8B78RxV3f5KN9LP04" target=3D"_blank" rel=3D"noopener"=
 style=3D"color:#00a4bd; mso-line-height-rule:exactly" data-hs-link-id=3D"0=
">Wordfence Response</a> customers. The firewall rule will be made availabl=
e to free Wordfence users 30 days later, on January 5, 2023.</p>
<p style=3D"mso-line-height-rule:exactly; line-height:175%">&nbsp;</p>
<p style=3D"mso-line-height-rule:exactly; line-height:175%">After reviewing=
 the vulnerability further, we determined that the patch was insufficient a=
nd could still be exploited, though it would be more difficult.</p>
<p style=3D"mso-line-height-rule:exactly; line-height:175%">We immediately =
contacted the Elementor team the same day, on December 6, 2023, to let them=
 know that the patch failed to fully resolve the issue. Elementor released =
a sufficient patch in version 3.18.2 on December 8, 2023. <strong>We commen=
d the team at Elementor in their swift response to this situation.</strong>=
</p>
<p style=3D"mso-line-height-rule:exactly; line-height:175%">&nbsp;</p>
<p style=3D"mso-line-height-rule:exactly; line-height:175%">Fortunately, th=
e vulnerability, while severe, requires Contributor-level privileges or hig=
her to exploit, which minimizes the number of sites likely to be impacted. =
Few sites use Contributors, and attackers would need to be able to register=
 as a contributor or higher user, or obtain valid credentials for a contrib=
utor-level+ user account to exploit this vulnerability.</p></div></div></td=
></tr></tbody></table>
</div>
<!--[if gte mso 9]></table><![endif]-->
<!--[if (mso)|(IE)]></td><![endif]-->
    <!--[if (mso)|(IE)]></tr></table><![endif]-->
    </div>
  =20
  </div>
  <div id=3D"section-2" class=3D"hse-section" style=3D"padding-left:10px; p=
adding-right:10px">
   =20
   =20
    <!--[if !((mso)|(IE))]><!-- -->
      <div class=3D"hse-column-container hse-border" style=3D"min-width:280=
px; max-width:600px; width:100%; Margin-left:auto; Margin-right:auto; borde=
r-collapse:collapse; border-spacing:0; border-left:0px solid #008cc1; borde=
r-right:0px solid #008cc1; box-sizing:border-box; background-color:#FFFFFF"=
 bgcolor=3D"#FFFFFF">
    <!--<![endif]-->
   =20
    <!--[if (mso)|(IE)]>
      <div class=3D"hse-column-container" style=3D"min-width:280px;max-widt=
h:600px;width:100%;Margin-left:auto;Margin-right:auto;border-collapse:colla=
pse;border-spacing:0;">
      <table align=3D"center" style=3D"border-collapse:collapse;mso-table-l=
space:0pt;mso-table-rspace:0pt;width:600px;border-left:0px solid #008CC1;bo=
rder-right:0px solid #008CC1" cellpadding=3D"0" cellspacing=3D"0" role=3D"p=
resentation" class=3D"hse-border" width=3D"600" bgcolor=3D"#FFFFFF">
      <tr style=3D"background-color:#FFFFFF;">
    <![endif]-->
    <!--[if (mso)|(IE)]>
  <td valign=3D"top" style=3D"width:600px;">
<![endif]-->
<!--[if gte mso 9]>
  <table role=3D"presentation" width=3D"600" cellpadding=3D"0" cellspacing=
=3D"0" style=3D"border-collapse:collapse;mso-table-lspace:0pt;mso-table-rsp=
ace:0pt;width:600px">
<![endif]-->
<div id=3D"column-2-0" class=3D"hse-column hse-size-12">
  <table role=3D"presentation" cellpadding=3D"0" cellspacing=3D"0" width=3D=
"100%" style=3D"border-spacing:0 !important; border-collapse:collapse; mso-=
table-lspace:0pt; mso-table-rspace:0pt"><tbody><tr><td class=3D"hs_padded" =
style=3D"border-collapse:collapse; mso-line-height-rule:exactly; font-famil=
y:Arial, sans-serif; font-size:15px; color:#525355; word-break:break-word; =
padding:10px 20px"><div id=3D"hs_cos_wrapper_module_16971242493161" class=
=3D"hs_cos_wrapper hs_cos_wrapper_widget hs_cos_wrapper_type_module" style=
=3D"color: inherit; font-size: inherit; line-height: inherit;" data-hs-cos-=
general-type=3D"widget" data-hs-cos-type=3D"module">
 =20
  <table align=3D"center" border=3D"0" cellpadding=3D"0" cellspacing=3D"0" =
role=3D"presentation" style=3D"border-spacing:0 !important; mso-table-lspac=
e:0pt; mso-table-rspace:0pt; border-collapse:separate!important">
    <tbody><tr>
        <!--[if mso]>
      <td align=3D"center" valign=3D"middle" bgcolor=3D"#00709E" valign=3D"=
middle" style=3D"border-radius:8px;cursor:auto;background-color:#00709E;pad=
ding:12px 18px;">
    <![endif]-->
    <!--[if !mso]><!-- -->
      <td align=3D"center" valign=3D"middle" bgcolor=3D"#00709E" style=3D"b=
order-collapse:collapse; mso-line-height-rule:exactly; font-family:Arial, s=
ans-serif; font-size:15px; color:#525355; word-break:break-word; border-rad=
ius:8px; cursor:auto; background-color:#00709E">
   <!--<![endif]-->
        <a href=3D"https://email.wordfence.com/e3t/Ctc/GC+113/cwG7R04/VX3hv=
n72Dfz1W7ByXrv1zyVLZW8QwHkG56Q9XQN1xVmYg5nR32W50kH_H6lZ3lqW16lHc17hF5zsW2RL=
7X62hgJf9W3ZGF_Y2D-JMxW2vymXg84fD5VW5dHz974FbqKKW7C5YKs1qwpPYW1qCFYc3QhCVlW=
7P2DKJ9jYFG7W2C9Bst4kN5lyW1nMWWJ82FLTXW5ztT8x1hrW3lV-ZNN_7XctFkW3Hzbvv29FXF=
5W2WdhLs1g7JjvW2S3-v82d528kVTyHf-3Sv-TGW4Xx8yd4vXdTvW92TmkH85kT9kW1Jlk9K5tq=
n12W3Cynqw7nZbxcW3Rmd2w8JzHzTW85MrP21rN10YW5lNq7x5sNk3PW6kNWMD3x2LwnW2p17FY=
8Xwl7YW8KP0jw3h-XmPN6WGl9K_RRYJW2WrrJ56rJYKSVL5LyW9cXmWjW1BqTv-6T3k4sW1tfKk=
k4gN36DW3gNJfP6p2T-_f4LZ-g404" target=3D"_blank" style=3D"color:#00a4bd; ms=
o-line-height-rule:exactly; font-size:16px; font-family:arial, helvetica, s=
ans-serif; Margin:0; text-transform:none; text-decoration:none; padding:12p=
x 18px; display:block" data-hs-link-id=3D"1">
          <strong style=3D"color:#ffffff;font-weight:normal;text-decoration=
:none;font-style:normal;">CONTINUE READING ON THE BLOG</strong>
        </a>
      </td>
    </tr>
  </tbody></table>
</div></td></tr></tbody></table>
</div>
<!--[if gte mso 9]></table><![endif]-->
<!--[if (mso)|(IE)]></td><![endif]-->
    <!--[if (mso)|(IE)]></tr></table><![endif]-->
    </div>
  =20
  </div>
  <div id=3D"section-3" class=3D"hse-section" style=3D"padding-left:10px; p=
adding-right:10px">
   =20
   =20
    <!--[if !((mso)|(IE))]><!-- -->
      <div class=3D"hse-column-container hse-border" style=3D"min-width:280=
px; max-width:600px; width:100%; Margin-left:auto; Margin-right:auto; borde=
r-collapse:collapse; border-spacing:0; border-left:0px solid #008cc1; borde=
r-right:0px solid #008cc1; box-sizing:border-box; background-color:#FFFFFF"=
 bgcolor=3D"#FFFFFF">
    <!--<![endif]-->
   =20
    <!--[if (mso)|(IE)]>
      <div class=3D"hse-column-container" style=3D"min-width:280px;max-widt=
h:600px;width:100%;Margin-left:auto;Margin-right:auto;border-collapse:colla=
pse;border-spacing:0;">
      <table align=3D"center" style=3D"border-collapse:collapse;mso-table-l=
space:0pt;mso-table-rspace:0pt;width:600px;border-left:0px solid #008CC1;bo=
rder-right:0px solid #008CC1" cellpadding=3D"0" cellspacing=3D"0" role=3D"p=
resentation" class=3D"hse-border" width=3D"600" bgcolor=3D"#FFFFFF">
      <tr style=3D"background-color:#FFFFFF;">
    <![endif]-->
    <!--[if (mso)|(IE)]>
  <td valign=3D"top" style=3D"width:600px;">
<![endif]-->
<!--[if gte mso 9]>
  <table role=3D"presentation" width=3D"600" cellpadding=3D"0" cellspacing=
=3D"0" style=3D"border-collapse:collapse;mso-table-lspace:0pt;mso-table-rsp=
ace:0pt;width:600px">
<![endif]-->
<div id=3D"column-3-0" class=3D"hse-column hse-size-12">
  <table role=3D"presentation" cellpadding=3D"0" cellspacing=3D"0" width=3D=
"100%" style=3D"border-spacing:0 !important; border-collapse:collapse; mso-=
table-lspace:0pt; mso-table-rspace:0pt"><tbody><tr><td class=3D"hs_padded" =
style=3D"border-collapse:collapse; mso-line-height-rule:exactly; font-famil=
y:Arial, sans-serif; font-size:15px; color:#525355; word-break:break-word; =
padding:10px 20px"><div id=3D"hs_cos_wrapper_module_17020429609141" class=
=3D"hs_cos_wrapper hs_cos_wrapper_widget hs_cos_wrapper_type_module" style=
=3D"color: inherit; font-size: inherit; line-height: inherit;" data-hs-cos-=
general-type=3D"widget" data-hs-cos-type=3D"module"><div id=3D"hs_cos_wrapp=
er_module_17020429609141_" class=3D"hs_cos_wrapper hs_cos_wrapper_widget hs=
_cos_wrapper_type_rich_text" style=3D"color: inherit; font-size: inherit; l=
ine-height: inherit;" data-hs-cos-general-type=3D"widget" data-hs-cos-type=
=3D"rich_text"><h2 style=3D"margin:0; mso-line-height-rule:exactly; line-he=
ight:175%; font-size:22px">Vulnerability Summary from Wordfence Intelligenc=
e</h2>
<div style=3D"mso-line-height-rule:exactly; padding:6px; margin-bottom:1em;=
 background-color:#f2f2f2; line-height:1.4" bgcolor=3D"#f2f2f2"><strong>Des=
cription:</strong> <a href=3D"https://email.wordfence.com/e3t/Ctc/GC+113/cw=
G7R04/VX3hvn72Dfz1W7ByXrv1zyVLZW8QwHkG56Q9XQN1xVm-25nR32W8wM7ks6lZ3pSW8q1gg=
x5FSGkVN6kgNLbYpSbZW6WVcyd4V30R-V7bJBk30t4wqW8n0jlv5X5wgyW1twT508Wtcr9W48T_=
yL8b3ssRW6jxPjC8M6JWrW7hrpDL9dg8RcW5qQNGc39ZrtKW7gZPBk3GbNHsW4LnRT-27vtCjW4=
wQTzX21Gy5RW5Nft8F44lW79N4_CpQChh6bBW56pq8R4dw555W5fDKsR8KWVZsN27tCdpxPpy7W=
35LBHJ32ClwVVlbGz294DWS7W3tbYhx5ntqQvW2GwwyC4X3M4VW1r0_hb8WTjr9W1b5Wg36tpbV=
wW8bX4-Y7H-rkLW5DPQ2S3b84N2W2pxzMK1k5LDmW59tNLX8S9kmPVT5x7g3Ygm_mW7rhHBb3_y=
TKwN7D5gvL3KvCfW24Gry64mvnMJW2-d83L87DlcqW3HFW9w6K4cmJW6XyJvK7SBb29W2CCdl_1=
5HgGvW8yDg_Q1ygrkGW6KVM5p8vQhvCW35K7m_2dT0GhN6SSRHJQh_lkW6tMgdB5VqMLNW6NlZy=
v294vnBW3xpDrb8cn1lfW2PM5lP2Nv3WSf2b6TgH04" target=3D"_blank" rel=3D"noopen=
er" style=3D"color:#00a4bd; mso-line-height-rule:exactly" data-hs-link-id=
=3D"0">Elementor &lt;=3D 3.18.1 Authenticated(Contributor+) Arbitrary File =
Upload to Remote Code Execution via Template Import</a><br><strong>Affected=
 Plugin:</strong> Elementor<br><strong>Plugin Slug:</strong> elementor<br><=
strong>Affected Versions:</strong> &lt;=3D 3.18.1<br><strong>CVE ID:</stron=
g> CVE-2023-48777<br><strong>Pending CVSS Score:</strong> 8.8 (Highl)<br><s=
trong>CVSS Vector:</strong> CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H<br=
><strong>Researcher/s:</strong> <a href=3D"https://email.wordfence.com/e3t/=
Ctc/GC+113/cwG7R04/VX3hvn72Dfz1W7ByXrv1zyVLZW8QwHkG56Q9XQN1xVm-l3qgyTW95jsW=
P6lZ3mjW248xf45k3pmzW4bSxVv3WbR97W6_vlym54DcmfW2yfj9W7NlSbrW5V68ZV2-2GmPW45=
CLv-6ZwffXW2HbJk713w2llW5hchxj2fphSJVVLD2B1Ml3n_N6L-nhwztggDW1WRY7n51nWZYN2=
KJ6S3h694sW7j6T3_5cCGZcW3t-ySN4439VzW3DLQ-m9d2pH2W3DnmhY8QTgYRW8V0lDL7fXRvS=
W5Q6-Vl4RcrFLMJ01y7C87PBW59Jqhs93VcMXW5Dh2r52gLySgW8rzp2g8qjQ23N8QPJ291hX4W=
W2ks2Gy1l3zgsW3fcWGw6wFp6BW839nNf42ZQ3XV-40R97Qh8hmW14C9G32r2z0PW1JFYG92_xY=
q6W3c_vLs3Mzzh8f62Pfk604" target=3D"_blank" rel=3D"noopener" style=3D"color=
:#00a4bd; mso-line-height-rule:exactly" data-hs-link-id=3D"0">H=E1=BB=93ng =
Qu=C3=A2n</a><br><strong>Fully Patched Version:</strong> 3.18.2</div>
<p style=3D"mso-line-height-rule:exactly; line-height:175%">The Elementor W=
ebsite Builder plugin for WordPress is vulnerable to Remote Code Execution =
via file upload in all versions up to and including 3.18.1 via the template=
 import functionality. This makes it possible for authenticated attackers, =
with contributor-level access and above, to upload files and execute code o=
n the server. Technical Analysis The source of the issue is the <span style=
=3D"font-family: 'Courier New', Courier, monospace;">handle_elementor_uploa=
d</span> function called by the <span style=3D"font-family: 'Courier New', =
Courier, monospace;">import_template</span> Elementor AJAX function, which =
is accessible to Contributor-level users and above. Although it uses file t=
ype validation, vulnerable versions first save the uploaded file to a tempo=
rary directory before checking the file type, and do not delete the tempora=
ry file if it fails this validation:</p>
<pre style=3D"white-space:pre-wrap">public function handle_elementor_upload=
( array $file, $allowed_file_extensions =3D null ) {<br>=09=09// If $file['=
fileData'] is set, it signals that the passed file is a Base64 string that =
needs to be decoded and<br>=09=09// saved to a temporary file.<br>=09=09if =
( isset( $file['fileData'] ) ) {<br>=09=09=09$file =3D $this-&gt;save_base6=
4_to_tmp_file( $file );<br>=09=09}<br><br>=09=09$validation_result =3D $thi=
s-&gt;validate_file( $file, $allowed_file_extensions );<br><br>=09=09if ( i=
s_wp_error( $validation_result ) ) {<br>=09=09=09return $validation_result;=
<br>=09=09}<br><br>=09=09return $file;<br>=09}</pre>
<p style=3D"mso-line-height-rule:exactly; line-height:175%">This means that=
 contributors with access to the Elementor editor could upload files of any=
 type and they will be saved in a temporary directory with a randomized nam=
e. While attackers exploiting versions before 3.18.1 could use directory tr=
aversal to move the uploaded file into a more predictable location, the 3.1=
8.1 partial patch sanitized the filename, meaning that it could only be upl=
oaded directly to the temporary directory.</p>
<p style=3D"mso-line-height-rule:exactly; line-height:175%">&nbsp;</p>
<p style=3D"mso-line-height-rule:exactly; line-height:175%">Since the explo=
it returns a 500 error and provides no feedback on the location of the temp=
orary directory, attackers would have difficulty finding the uploaded file =
unless directory indexing was enabled on the server, which is no longer com=
mon due to the many security risks it presents.</p>
<p style=3D"mso-line-height-rule:exactly; line-height:175%">&nbsp;</p>
<h2 style=3D"margin:0; mso-line-height-rule:exactly; line-height:175%; font=
-size:22px">Conclusion</h2>
<p style=3D"mso-line-height-rule:exactly; line-height:175%">In today's PSA,=
 we covered a file upload vulnerability in Elementor affecting versions 3.1=
8.1 and earlier. We strongly recommend updating to the latest version of El=
ementor, which is 3.18.2 as of this writing, as soon as possible, as this i=
s a high-severity vulnerability which can be used by attackers to upload fi=
les and take control of a site.</p>
<p style=3D"mso-line-height-rule:exactly; line-height:175%">&nbsp;</p>
<p style=3D"mso-line-height-rule:exactly; line-height:175%">All Wordfence u=
sers, including those running <a href=3D"https://email.wordfence.com/e3t/Ct=
c/GC+113/cwG7R04/VX3hvn72Dfz1W7ByXrv1zyVLZW8QwHkG56Q9XQN1xVmZM3qgyTW7Y8-PT6=
lZ3ktW6yz7Yb52SB8gW3kQ30V8mshRQW9bldk46Mgm_9W5Ppn0K4C6fZcVVv9ff7GRDKPW7KB0b=
917-98HW8qY2_J4gMrltVwcj827RWVXFW1Db5ft4wyBskW3XqF422bD5m_W8mVyyk2l3C7YW3V9=
csd5z17LpW7R5g_C14rdGXW6p54wq7vph3fW6QD93Y58C0GsW8KvHJl16PQ8zW7Z7DND1Y-D0ZW=
5C2-X73pvs0xW6HbcX04myDn7W8k89gz1DjrV1W2Qqqvm2q2pgzW3m9zZK6mZ6tKW5Vd0vz2JS3=
y3W4zJj2R4-Y-DgW5d8Vb15LlXMhW53TtW55HxcLBf3rL3Yj04" target=3D"_blank" rel=
=3D"noopener" style=3D"color:#00a4bd; mso-line-height-rule:exactly" data-hs=
-link-id=3D"1">Wordfence Premium</a>, <a href=3D"https://email.wordfence.co=
m/e3t/Ctc/GC+113/cwG7R04/VX3hvn72Dfz1W7ByXrv1zyVLZW8QwHkG56Q9XQN1xVmZM3qgyT=
W7Y8-PT6lZ3kYW17DQ4S4fgRPRW7rGqs38cFW1MW3MYn3b6-R2YpW62_HDj8jK62XW4r1kK87tT=
StXW1SSpSJ7K2N_dW4-flMt2QndthVHgdrR812WfWW7Y5W3C5V582WW73nt_J1Tr0wlW4GJMLh4=
V1n2SVkdxQD1zvqC2W3BX3Fj234cXqW42WDGd35014jVv919747qbGFW7m1nht5lf8T4W2Kpjyx=
4G0-nhW70bGLt3R0DJ5W95X2H35Wxk0ZW8fnX1d5D47x0W7BcFG81j3C3BW8S8FCw1v8GXbW6RR=
H1J2FmtpLW1NSSs763fpWQN90TJQJCFngGW990ntJ8QqJsQf1-Vjqn04" target=3D"_blank"=
 rel=3D"noopener" style=3D"color:#00a4bd; mso-line-height-rule:exactly" dat=
a-hs-link-id=3D"1">Wordfence Care</a>, and <a href=3D"https://email.wordfen=
ce.com/e3t/Ctc/GC+113/cwG7R04/VX3hvn72Dfz1W7ByXrv1zyVLZW8QwHkG56Q9XQN1xVmZM=
3qgyTW7Y8-PT6lZ3nkW3-cX8x83vpRtW190M052-lYH9W1xWvjw13tdPrW4nvQKX1yqWqVW8zKw=
174RRfvVW3whGp02FmKBdW21T9vn6RsGcnW7XjGG34TxlgFN1YHVj5jGVMkW7BhPHQ4_pS0bW7q=
bRvy6nWTYTN7NqTmXyt7Q9VPk3jK4BN9grW3lKHpv4zswN1W7qxfnm2KHr0ZMvHQJbJh-HhW4Lk=
kcD1F2qTdN1FMvh3685znW89gQ9d1LWkDPW4WbhtL4GHfrNW5P4vjw8PV16KN5vyCnwTllJMVWg=
nPQ51GH71W81y4_k3qz5-ZW7lXdPY99xDX5W4GgQNq6sL6kkf16SJ7v04" target=3D"_blank=
" rel=3D"noopener" style=3D"color:#00a4bd; mso-line-height-rule:exactly" da=
ta-hs-link-id=3D"1">Wordfence Response,</a>&nbsp;are fully protected agains=
t this vulnerability.</p>
<p style=3D"mso-line-height-rule:exactly; line-height:175%">If you know som=
eone who uses this plugin on their site, we recommend sharing this advisory=
 with them to ensure their site remains secure, as this vulnerability poses=
 a significant risk.</p>
<p style=3D"mso-line-height-rule:exactly; line-height:175%">&nbsp;</p>
<p style=3D"mso-line-height-rule:exactly; line-height:175%"><em>Did you kno=
w that Wordfence has a&nbsp;<a href=3D"https://email.wordfence.com/e3t/Ctc/=
GC+113/cwG7R04/VX3hvn72Dfz1W7ByXrv1zyVLZW8QwHkG56Q9XQN1xVm-23qgyTW8wLKSR6lZ=
3mBW6mb4Qj4StG7gW55rdCW7RxGrtW4V_6_T4fzfRrW4q4tj_338yRPW3pNX4q7r2ZM4W3_ZLTG=
8tDfVkW61pm6g4zf_SJW6c3-g652dh1jVXLbS12Cj6S6W47kn3J8JhFn2V7jDhf1HClmcW7vKRh=
85TygSTM52ZGMcdjT3W6hhd105SYhM5N4M0dD1nxyVGW3qNMQd5wd6h5W2qj8kp6TT2CTW1Mc1x=
z594sG1W48BYnG8TvKc1W2BW2B67WRG96W3QHntM3HjWXnV8hvgG61VMjRW3YFfbW8RMmnwN4R9=
j_cHstWXVgtdsK8mhq_-VV-DXw1QtxK6W1dlJF54wRZ6kW6z1Fc75W5jwFf7lNK2H04" target=
=3D"_blank" rel=3D"noopener" style=3D"color:#00a4bd; mso-line-height-rule:e=
xactly" data-hs-link-id=3D"0">Bug Bounty Program</a>? We=E2=80=99ve recentl=
y increased our bounties by 6.25x until December 20th, 2023, with our bount=
ies for the most critical vulnerabilities reaching $10,000 USD! If you=E2=
=80=99re an aspiring or current vulnerability researcher,&nbsp;<a href=3D"h=
ttps://email.wordfence.com/e3t/Ctc/GC+113/cwG7R04/VX3hvn72Dfz1W7ByXrv1zyVLZ=
W8QwHkG56Q9XQN1xVm-23qgyTW8wLKSR6lZ3mhVjQ-qn3JDLNxW4XcZVJ1dzYksW2mtqCk6bV1d=
FW4zXPwW5C4gwzW6vHZST1LGqG0W2YzHw-3Cj20zW2gYWG81b8fWGW8C8BZW25bs4KW7t05PG1m=
XBFpW1F93z46FtvkjVtTYXN8mwdCnW2fqByM6nXF5SW7cBBhM6q3p_WW3QKfXG19PBYLW7cJBLg=
5w0VgvW27xSrt2H9snXW8rPLg92V52RMW1jKY9y7r69VPVrh3kQ3VCXBwW2bXprS2ZMHW5W55nQ=
hP3_KYB8W74CwQw1_tv1GW7VRYXh4GVrsrW3hdSpl1_xSYkN5j7-7pzx8FGW61QVvx6TSHdTN5M=
_TggBYt8qW4tgz3L84lgc6f6w15xx04" target=3D"_blank" rel=3D"noopener" style=
=3D"color:#00a4bd; mso-line-height-rule:exactly" data-hs-link-id=3D"0">clic=
k here to sign up.</a></em></p></div></div></td></tr></tbody></table>
<table role=3D"presentation" cellpadding=3D"0" cellspacing=3D"0" width=3D"1=
00%" style=3D"border-spacing:0 !important; border-collapse:collapse; mso-ta=
ble-lspace:0pt; mso-table-rspace:0pt"><tbody><tr><td class=3D"hs_padded" st=
yle=3D"border-collapse:collapse; mso-line-height-rule:exactly; font-family:=
Arial, sans-serif; font-size:15px; color:#525355; word-break:break-word; pa=
dding:0px 20px 15px"><div id=3D"hs_cos_wrapper_module-3-0-0" class=3D"hs_co=
s_wrapper hs_cos_wrapper_widget hs_cos_wrapper_type_module" style=3D"color:=
 inherit; font-size: inherit; line-height: inherit;" data-hs-cos-general-ty=
pe=3D"widget" data-hs-cos-type=3D"module"><div id=3D"hs_cos_wrapper_module-=
3-0-0_" class=3D"hs_cos_wrapper hs_cos_wrapper_widget hs_cos_wrapper_type_r=
ich_text" style=3D"color: inherit; font-size: inherit; line-height: inherit=
;" data-hs-cos-general-type=3D"widget" data-hs-cos-type=3D"rich_text"><h2 s=
tyle=3D"margin:0; mso-line-height-rule:exactly; font-size:20px; line-height=
:175%; text-align:center; font-weight:bold" align=3D"center"><span style=3D=
"font-family: Arial, sans-serif; color: #000000;">The Full Product Lineup</=
span></h2></div></div></td></tr></tbody></table>
</div>
<!--[if gte mso 9]></table><![endif]-->
<!--[if (mso)|(IE)]></td><![endif]-->
    <!--[if (mso)|(IE)]></tr></table><![endif]-->
    </div>
  =20
  </div>
  <div id=3D"section-4" class=3D"hse-section" style=3D"padding-left:10px; p=
adding-right:10px">
   =20
   =20
    <!--[if !((mso)|(IE))]><!-- -->
      <div class=3D"hse-column-container hse-border" style=3D"min-width:280=
px; max-width:600px; width:100%; Margin-left:auto; Margin-right:auto; borde=
r-collapse:collapse; border-spacing:0; border-left:0px solid #008cc1; borde=
r-right:0px solid #008cc1; box-sizing:border-box; background-color:#FFFFFF"=
 bgcolor=3D"#FFFFFF">
    <!--<![endif]-->
   =20
    <!--[if (mso)|(IE)]>
      <div class=3D"hse-column-container" style=3D"min-width:280px;max-widt=
h:600px;width:100%;Margin-left:auto;Margin-right:auto;border-collapse:colla=
pse;border-spacing:0;">
      <table align=3D"center" style=3D"border-collapse:collapse;mso-table-l=
space:0pt;mso-table-rspace:0pt;width:600px;border-left:0px solid #008CC1;bo=
rder-right:0px solid #008CC1" cellpadding=3D"0" cellspacing=3D"0" role=3D"p=
resentation" class=3D"hse-border" width=3D"600" bgcolor=3D"#FFFFFF">
      <tr style=3D"background-color:#FFFFFF;">
    <![endif]-->
    <!--[if (mso)|(IE)]>
  <td valign=3D"top" style=3D"width:200px;">
<![endif]-->
<!--[if gte mso 9]>
  <table role=3D"presentation" width=3D"200" cellpadding=3D"0" cellspacing=
=3D"0" style=3D"border-collapse:collapse;mso-table-lspace:0pt;mso-table-rsp=
ace:0pt;width:200px">
<![endif]-->
<div id=3D"column-4-0" class=3D"hse-column hse-size-4">
  <div id=3D"hs_cos_wrapper_module-4-0-0" class=3D"hs_cos_wrapper hs_cos_wr=
apper_widget hs_cos_wrapper_type_module" style=3D"color: inherit; font-size=
: inherit; line-height: inherit;" data-hs-cos-general-type=3D"widget" data-=
hs-cos-type=3D"module"><table class=3D"hse-image-wrapper" role=3D"presentat=
ion" width=3D"100%" cellpadding=3D"0" cellspacing=3D"0" style=3D"border-spa=
cing:0 !important; border-collapse:collapse; mso-table-lspace:0pt; mso-tabl=
e-rspace:0pt">
  <tbody>
    <tr>
      <td class=3D"hs_padded" align=3D"center" valign=3D"top" style=3D"bord=
er-collapse:collapse; mso-line-height-rule:exactly; font-family:Arial, sans=
-serif; color:#525355; word-break:break-word; text-align:center; padding:10=
px 20px; font-size:0px">
        <a href=3D"https://email.wordfence.com/e3t/Ctc/GC+113/cwG7R04/VX3hv=
n72Dfz1W7ByXrv1zyVLZW8QwHkG56Q9XQN1xVmZM3qgyTW7Y8-PT6lZ3pzW92L5-L4Wzp8KW694=
M_27hjWPcVy_rq067D3r4W48Z-Z141xrnsW5p6myv92FcLQW5yMbqJ1QJ-zJN5WWmx4ZYdHVW5W=
KCKj1-mxghW5bFNCd2hyXrVW3HBwMy7nz9TWW8xSks-6QdxRqW3P2-qN2RT8x_W2zqlFt3Szz_Q=
W5H8ls_2X1TlhW4vD4zB4FWSvyW2ZWnCg1jJhxLW12y0wH73sFHGVJPCNx95X3zXVGTbRJ2v2fB=
LW2CwYYR4984mmW90QXWp2tL5SVW5lX4G31fRLvcW1Zj_N54jPK6JW5sn2lf4f892VMdr7TGCRs=
MWW8lMCFR88GXjxf1KpBh204" target=3D"_blank" style=3D"color:#00a4bd; mso-lin=
e-height-rule:exactly" data-hs-link-id=3D"0">
        <img alt=3D"wf-stacked-free-1" src=3D"https://email.wordfence.com/h=
s-fs/hubfs/wf-stacked-free-1.jpg?width=3D200&amp;upscale=3Dtrue&amp;name=3D=
wf-stacked-free-1.jpg" style=3D"outline:none; text-decoration:none; -ms-int=
erpolation-mode:bicubic; border:none; max-width:100%; font-size:16px" width=
=3D"100" align=3D"middle" srcset=3D"https://email.wordfence.com/hs-fs/hubfs=
/wf-stacked-free-1.jpg?upscale=3Dtrue&amp;width=3D200&amp;upscale=3Dtrue&am=
p;name=3Dwf-stacked-free-1.jpg 100w, https://email.wordfence.com/hs-fs/hubf=
s/wf-stacked-free-1.jpg?upscale=3Dtrue&amp;width=3D400&amp;upscale=3Dtrue&a=
mp;name=3Dwf-stacked-free-1.jpg 200w" sizes=3D"(max-width: 100px) 100vw, 10=
0px">
        </a>
      </td>
    </tr>
  </tbody>
</table></div>
</div>
<!--[if gte mso 9]></table><![endif]-->
<!--[if (mso)|(IE)]></td><![endif]-->
<!--[if (mso)|(IE)]>
  <td valign=3D"top" style=3D"width:200px;">
<![endif]-->
<!--[if gte mso 9]>
  <table role=3D"presentation" width=3D"200" cellpadding=3D"0" cellspacing=
=3D"0" style=3D"border-collapse:collapse;mso-table-lspace:0pt;mso-table-rsp=
ace:0pt;width:200px">
<![endif]-->
<div id=3D"column-4-1" class=3D"hse-column hse-size-4">
  <div id=3D"hs_cos_wrapper_module-4-1-0" class=3D"hs_cos_wrapper hs_cos_wr=
apper_widget hs_cos_wrapper_type_module" style=3D"color: inherit; font-size=
: inherit; line-height: inherit;" data-hs-cos-general-type=3D"widget" data-=
hs-cos-type=3D"module"><table class=3D"hse-image-wrapper" role=3D"presentat=
ion" width=3D"100%" cellpadding=3D"0" cellspacing=3D"0" style=3D"border-spa=
cing:0 !important; border-collapse:collapse; mso-table-lspace:0pt; mso-tabl=
e-rspace:0pt">
  <tbody>
    <tr>
      <td class=3D"hs_padded" align=3D"center" valign=3D"top" style=3D"bord=
er-collapse:collapse; mso-line-height-rule:exactly; font-family:Arial, sans=
-serif; color:#525355; word-break:break-word; text-align:center; padding:10=
px 20px; font-size:0px">
        <a href=3D"https://email.wordfence.com/e3t/Ctc/GC+113/cwG7R04/VX3hv=
n72Dfz1W7ByXrv1zyVLZW8QwHkG56Q9XQN1xVmZM3qgyTW7Y8-PT6lZ3m5W5y5XvW2JPXzcW5BF=
04Z4zVFdMW3_wTL79bXHb7W2R8Zp53ShDfFW6Sfh1Y61V14XW1vVNLq6FrhFVW3gdy-F3VpjGyW=
4l9hh54WygXBW8QsxH46hx3x-W8jf7rK726TwyW8svfm_9j31-KW1hB0xF4QyFBSN2DKt79Wp_v=
kW81mY_56cpcx5W7k8v3B2L1FyCN8z3g2SfX5BJW5VlLcR7RpHWlVYt_r14d7Rg6W3cZkf32Tw_=
wLW1y3Zvm98CQW6W2g5Q464-y0TpN18W61y47KxWW1GsfBT6nqfk8V_vcbJ1XM52bW6HYJ5W9jp=
htqW63cBL88-bdvtd2yp4x04" target=3D"_blank" style=3D"color:#00a4bd; mso-lin=
e-height-rule:exactly" data-hs-link-id=3D"0">
        <img alt=3D"wf-stacked-premium-1" src=3D"https://email.wordfence.co=
m/hs-fs/hubfs/wf-stacked-premium-1.jpg?width=3D200&amp;upscale=3Dtrue&amp;n=
ame=3Dwf-stacked-premium-1.jpg" style=3D"outline:none; text-decoration:none=
; -ms-interpolation-mode:bicubic; border:none; max-width:100%; font-size:16=
px" width=3D"100" align=3D"middle" srcset=3D"https://email.wordfence.com/hs=
-fs/hubfs/wf-stacked-premium-1.jpg?upscale=3Dtrue&amp;width=3D200&amp;upsca=
le=3Dtrue&amp;name=3Dwf-stacked-premium-1.jpg 100w, https://email.wordfence=
.com/hs-fs/hubfs/wf-stacked-premium-1.jpg?upscale=3Dtrue&amp;width=3D400&am=
p;upscale=3Dtrue&amp;name=3Dwf-stacked-premium-1.jpg 200w" sizes=3D"(max-wi=
dth: 100px) 100vw, 100px">
        </a>
      </td>
    </tr>
  </tbody>
</table></div>
</div>
<!--[if gte mso 9]></table><![endif]-->
<!--[if (mso)|(IE)]></td><![endif]-->
<!--[if (mso)|(IE)]>
  <td valign=3D"top" style=3D"width:200px;">
<![endif]-->
<!--[if gte mso 9]>
  <table role=3D"presentation" width=3D"200" cellpadding=3D"0" cellspacing=
=3D"0" style=3D"border-collapse:collapse;mso-table-lspace:0pt;mso-table-rsp=
ace:0pt;width:200px">
<![endif]-->
<div id=3D"column-4-2" class=3D"hse-column hse-size-4">
  <div id=3D"hs_cos_wrapper_module-4-2-0" class=3D"hs_cos_wrapper hs_cos_wr=
apper_widget hs_cos_wrapper_type_module" style=3D"color: inherit; font-size=
: inherit; line-height: inherit;" data-hs-cos-general-type=3D"widget" data-=
hs-cos-type=3D"module"><table class=3D"hse-image-wrapper" role=3D"presentat=
ion" width=3D"100%" cellpadding=3D"0" cellspacing=3D"0" style=3D"border-spa=
cing:0 !important; border-collapse:collapse; mso-table-lspace:0pt; mso-tabl=
e-rspace:0pt">
  <tbody>
    <tr>
      <td class=3D"hs_padded" align=3D"center" valign=3D"top" style=3D"bord=
er-collapse:collapse; mso-line-height-rule:exactly; font-family:Arial, sans=
-serif; color:#525355; word-break:break-word; text-align:center; padding:10=
px 20px; font-size:0px">
        <a href=3D"https://email.wordfence.com/e3t/Ctc/GC+113/cwG7R04/VX3hv=
n72Dfz1W7ByXrv1zyVLZW8QwHkG56Q9XQN1xVmZM3qgyTW7Y8-PT6lZ3pHN3b4fc1hkvyYW1qJn=
SS5hgWVPW81_1bY25ZtrxN5mnPfSJnyp3W4YL6GR9byLybW1wjDTR8Gr6fZW8n79zx5vl6ZWW42=
qx164lJMpBW3f1Bhb6Y32zXW8nqjX-7VLSJ6N6NYmxX9bVcVW8tSqm03gscqBW3J6SFr94chqDW=
4JMSsg8l9_lHW6hBp-F4kXrGdW669_fb90pMhDW2jHmTn6kG_rVW6zGYlv4zhsrcW4RtszC75rB=
KDW2_RS-F11W6hXW5_RZ1N4Z70z1W12rHN449CQrMW2S-ypC4zMglxW3YDq4w7wx8NYN7S_bcyY=
g45PW5q7D407KSf17f1BvMkb04" target=3D"_blank" style=3D"color:#00a4bd; mso-l=
ine-height-rule:exactly" data-hs-link-id=3D"0">
        <img alt=3D"wf-stacked-care-3" src=3D"https://email.wordfence.com/h=
s-fs/hubfs/wf-stacked-care-3.jpg?width=3D200&amp;upscale=3Dtrue&amp;name=3D=
wf-stacked-care-3.jpg" style=3D"outline:none; text-decoration:none; -ms-int=
erpolation-mode:bicubic; border:none; max-width:100%; font-size:16px" width=
=3D"100" align=3D"middle" srcset=3D"https://email.wordfence.com/hs-fs/hubfs=
/wf-stacked-care-3.jpg?upscale=3Dtrue&amp;width=3D200&amp;upscale=3Dtrue&am=
p;name=3Dwf-stacked-care-3.jpg 100w, https://email.wordfence.com/hs-fs/hubf=
s/wf-stacked-care-3.jpg?upscale=3Dtrue&amp;width=3D400&amp;upscale=3Dtrue&a=
mp;name=3Dwf-stacked-care-3.jpg 200w" sizes=3D"(max-width: 100px) 100vw, 10=
0px">
        </a>
      </td>
    </tr>
  </tbody>
</table></div>
</div>
<!--[if gte mso 9]></table><![endif]-->
<!--[if (mso)|(IE)]></td><![endif]-->
    <!--[if (mso)|(IE)]></tr></table><![endif]-->
    </div>
  =20
  </div>
  <div id=3D"section-5" class=3D"hse-section" style=3D"padding-left:10px; p=
adding-right:10px">
   =20
   =20
    <!--[if !((mso)|(IE))]><!-- -->
      <div class=3D"hse-column-container hse-border" style=3D"min-width:280=
px; max-width:600px; width:100%; Margin-left:auto; Margin-right:auto; borde=
r-collapse:collapse; border-spacing:0; border-left:0px solid #008cc1; borde=
r-right:0px solid #008cc1; box-sizing:border-box; background-color:#FFFFFF"=
 bgcolor=3D"#FFFFFF">
    <!--<![endif]-->
   =20
    <!--[if (mso)|(IE)]>
      <div class=3D"hse-column-container" style=3D"min-width:280px;max-widt=
h:600px;width:100%;Margin-left:auto;Margin-right:auto;border-collapse:colla=
pse;border-spacing:0;">
      <table align=3D"center" style=3D"border-collapse:collapse;mso-table-l=
space:0pt;mso-table-rspace:0pt;width:600px;border-left:0px solid #008CC1;bo=
rder-right:0px solid #008CC1" cellpadding=3D"0" cellspacing=3D"0" role=3D"p=
resentation" class=3D"hse-border" width=3D"600" bgcolor=3D"#FFFFFF">
      <tr style=3D"background-color:#FFFFFF;">
    <![endif]-->
    <!--[if (mso)|(IE)]>
  <td valign=3D"top" style=3D"width:200px;">
<![endif]-->
<!--[if gte mso 9]>
  <table role=3D"presentation" width=3D"200" cellpadding=3D"0" cellspacing=
=3D"0" style=3D"border-collapse:collapse;mso-table-lspace:0pt;mso-table-rsp=
ace:0pt;width:200px">
<![endif]-->
<div id=3D"column-5-0" class=3D"hse-column hse-size-4">
  <div id=3D"hs_cos_wrapper_module-5-0-0" class=3D"hs_cos_wrapper hs_cos_wr=
apper_widget hs_cos_wrapper_type_module" style=3D"color: inherit; font-size=
: inherit; line-height: inherit;" data-hs-cos-general-type=3D"widget" data-=
hs-cos-type=3D"module"><table class=3D"hse-image-wrapper" role=3D"presentat=
ion" width=3D"100%" cellpadding=3D"0" cellspacing=3D"0" style=3D"border-spa=
cing:0 !important; border-collapse:collapse; mso-table-lspace:0pt; mso-tabl=
e-rspace:0pt">
  <tbody>
    <tr>
      <td class=3D"hs_padded" align=3D"center" valign=3D"top" style=3D"bord=
er-collapse:collapse; mso-line-height-rule:exactly; font-family:Arial, sans=
-serif; color:#525355; word-break:break-word; text-align:center; padding:10=
px 20px; font-size:0px">
        <a href=3D"https://email.wordfence.com/e3t/Ctc/GC+113/cwG7R04/VX3hv=
n72Dfz1W7ByXrv1zyVLZW8QwHkG56Q9XQN1xVmZM3qgyTW7Y8-PT6lZ3nnVWc0VL2jl7wYVScvz=
C5CWR1jN1YNf6BMyBqxW75hmFF6H5tCGW3DrF279dvZ9RW9dNkzL78CLt0W1FbGLl8XGFtMW8_l=
9Xb4bwDKgW1zMg2M56qChqN2lg8c4wTQ3HW7nNfCF73xNSVW2hcHQl127_WpW7n4Kd32zCw7VW5=
ckh6w10bWcVW21DPSs3_nlw9W1fZcdJ5HV-X8W4w-90W8K4X1VN1nvPJTpwBY4W73kfzR3CkChX=
W78FBKL8V7BJ6W6hksf24jSg3hW7Xtkn-1d1RYDN61mFNjF2wZmW8-TKnC6DMNHxW2ZKzzy3sJ3=
9JW3htlmC8HNs2cf8Cxqfb04" target=3D"_blank" style=3D"color:#00a4bd; mso-lin=
e-height-rule:exactly" data-hs-link-id=3D"2">
        <img alt=3D"wf-stacked-response-2" src=3D"https://email.wordfence.c=
om/hs-fs/hubfs/wf-stacked-response-2.jpg?width=3D200&amp;upscale=3Dtrue&amp=
;name=3Dwf-stacked-response-2.jpg" style=3D"outline:none; text-decoration:n=
one; -ms-interpolation-mode:bicubic; border:none; max-width:100%; font-size=
:16px" width=3D"100" align=3D"middle" srcset=3D"https://email.wordfence.com=
/hs-fs/hubfs/wf-stacked-response-2.jpg?upscale=3Dtrue&amp;width=3D200&amp;u=
pscale=3Dtrue&amp;name=3Dwf-stacked-response-2.jpg 100w, https://email.word=
fence.com/hs-fs/hubfs/wf-stacked-response-2.jpg?upscale=3Dtrue&amp;width=3D=
400&amp;upscale=3Dtrue&amp;name=3Dwf-stacked-response-2.jpg 200w" sizes=3D"=
(max-width: 100px) 100vw, 100px">
        </a>
      </td>
    </tr>
  </tbody>
</table></div>
</div>
<!--[if gte mso 9]></table><![endif]-->
<!--[if (mso)|(IE)]></td><![endif]-->
<!--[if (mso)|(IE)]>
  <td valign=3D"top" style=3D"width:200px;">
<![endif]-->
<!--[if gte mso 9]>
  <table role=3D"presentation" width=3D"200" cellpadding=3D"0" cellspacing=
=3D"0" style=3D"border-collapse:collapse;mso-table-lspace:0pt;mso-table-rsp=
ace:0pt;width:200px">
<![endif]-->
<div id=3D"column-5-1" class=3D"hse-column hse-size-4">
  <div id=3D"hs_cos_wrapper_module-5-1-0" class=3D"hs_cos_wrapper hs_cos_wr=
apper_widget hs_cos_wrapper_type_module" style=3D"color: inherit; font-size=
: inherit; line-height: inherit;" data-hs-cos-general-type=3D"widget" data-=
hs-cos-type=3D"module"><table class=3D"hse-image-wrapper" role=3D"presentat=
ion" width=3D"100%" cellpadding=3D"0" cellspacing=3D"0" style=3D"border-spa=
cing:0 !important; border-collapse:collapse; mso-table-lspace:0pt; mso-tabl=
e-rspace:0pt">
  <tbody>
    <tr>
      <td class=3D"hs_padded" align=3D"center" valign=3D"top" style=3D"bord=
er-collapse:collapse; mso-line-height-rule:exactly; font-family:Arial, sans=
-serif; color:#525355; word-break:break-word; text-align:center; padding:10=
px 20px; font-size:0px">
        <a href=3D"https://email.wordfence.com/e3t/Ctc/GC+113/cwG7R04/VX3hv=
n72Dfz1W7ByXrv1zyVLZW8QwHkG56Q9XQN1xVmZM3qgyTW7Y8-PT6lZ3m9W3N5YLZ3qHnQqW5dN=
dwD3xxLZ6W30tYlv405TgfN2hr46pwlBcYW1J3Xkb1FfTcSW6KKk2D6ySk1TW67MMJs8NCh0TW8=
yt7PR59KCzjW7xydnF5BMWd-W6QP3LC85zBc7W8xxqwk5zM21mW1TcJYn44p848W6JHMPL38zQ4=
bW3pFqHT1pxxVyW1pJd_92P79LNW2wT91p98jm7JW5dghSL4r772QW8nsVrg4T0czVN4TpMMS2L=
FmYW8v8BJc5zmJQVVXHZn84-FQKLN1Fl3N7tlr4tVX-4xQ4HNGNZW5mm73J3jR3_gW21DVvK5Pd=
S5HW1KPPfM8l-WgNf3phLfT04" target=3D"_blank" style=3D"color:#00a4bd; mso-li=
ne-height-rule:exactly" data-hs-link-id=3D"0">
        <img alt=3D"wf-stacked-cli" src=3D"https://email.wordfence.com/hs-f=
s/hubfs/wf-stacked-cli.png?width=3D200&amp;upscale=3Dtrue&amp;name=3Dwf-sta=
cked-cli.png" style=3D"outline:none; text-decoration:none; -ms-interpolatio=
n-mode:bicubic; border:none; max-width:100%; font-size:16px" width=3D"100" =
align=3D"middle" srcset=3D"https://email.wordfence.com/hs-fs/hubfs/wf-stack=
ed-cli.png?upscale=3Dtrue&amp;width=3D200&amp;upscale=3Dtrue&amp;name=3Dwf-=
stacked-cli.png 100w, https://email.wordfence.com/hs-fs/hubfs/wf-stacked-cl=
i.png?upscale=3Dtrue&amp;width=3D400&amp;upscale=3Dtrue&amp;name=3Dwf-stack=
ed-cli.png 200w" sizes=3D"(max-width: 100px) 100vw, 100px">
        </a>
      </td>
    </tr>
  </tbody>
</table></div>
</div>
<!--[if gte mso 9]></table><![endif]-->
<!--[if (mso)|(IE)]></td><![endif]-->
<!--[if (mso)|(IE)]>
  <td valign=3D"top" style=3D"width:200px;">
<![endif]-->
<!--[if gte mso 9]>
  <table role=3D"presentation" width=3D"200" cellpadding=3D"0" cellspacing=
=3D"0" style=3D"border-collapse:collapse;mso-table-lspace:0pt;mso-table-rsp=
ace:0pt;width:200px">
<![endif]-->
<div id=3D"column-5-2" class=3D"hse-column hse-size-4">
  <div id=3D"hs_cos_wrapper_module-5-2-0" class=3D"hs_cos_wrapper hs_cos_wr=
apper_widget hs_cos_wrapper_type_module" style=3D"color: inherit; font-size=
: inherit; line-height: inherit;" data-hs-cos-general-type=3D"widget" data-=
hs-cos-type=3D"module"><table class=3D"hse-image-wrapper" role=3D"presentat=
ion" width=3D"100%" cellpadding=3D"0" cellspacing=3D"0" style=3D"border-spa=
cing:0 !important; border-collapse:collapse; mso-table-lspace:0pt; mso-tabl=
e-rspace:0pt">
  <tbody>
    <tr>
      <td class=3D"hs_padded" align=3D"center" valign=3D"top" style=3D"bord=
er-collapse:collapse; mso-line-height-rule:exactly; font-family:Arial, sans=
-serif; color:#525355; word-break:break-word; text-align:center; padding:10=
px 20px; font-size:0px">
        <a href=3D"https://email.wordfence.com/e3t/Ctc/GC+113/cwG7R04/VX3hv=
n72Dfz1W7ByXrv1zyVLZW8QwHkG56Q9XQN1xVmZs3qgyTW7lCdLW6lZ3krW6mf0T72flH-jW4LH=
QkD8f3LsKW7LDPRK297W1xW6DhWpF8ZhJxBW21s4Dy3nvfv2N4Z--x_p7qvfW41gtxQ14lbzJW7=
_SXKC71yJX5W7wtW7k1d64ZrW8wBQmq8kDNwTW85Ypmj3S9HNWW8FRB7p2RDMSyN4h6BgKHQNZ9=
W2TpsMS3PMZGzW7QBzMX740H4vW7Pp9Yl3sYz-7W6M5Vb99bS6wpW2Z83Xs34xlS-Vx4Cdl20Kn=
SfW5zYBVT8mD1L3W4J5gCs2Th7ZZW2wcgDc3c4dFCW6wDy-26jcn-cW1t1yYV2wv4Hcf9kMZls0=
4" target=3D"_blank" style=3D"color:#00a4bd; mso-line-height-rule:exactly" =
data-hs-link-id=3D"0">
        <img alt=3D"wf-stacked-intelligence" src=3D"https://email.wordfence=
.com/hs-fs/hubfs/wf-stacked-intelligence.png?width=3D200&amp;upscale=3Dtrue=
&amp;name=3Dwf-stacked-intelligence.png" style=3D"outline:none; text-decora=
tion:none; -ms-interpolation-mode:bicubic; border:none; max-width:100%; fon=
t-size:16px" width=3D"100" align=3D"middle" srcset=3D"https://email.wordfen=
ce.com/hs-fs/hubfs/wf-stacked-intelligence.png?upscale=3Dtrue&amp;width=3D2=
00&amp;upscale=3Dtrue&amp;name=3Dwf-stacked-intelligence.png 100w, https://=
email.wordfence.com/hs-fs/hubfs/wf-stacked-intelligence.png?upscale=3Dtrue&=
amp;width=3D400&amp;upscale=3Dtrue&amp;name=3Dwf-stacked-intelligence.png 2=
00w" sizes=3D"(max-width: 100px) 100vw, 100px">
        </a>
      </td>
    </tr>
  </tbody>
</table></div>
</div>
<!--[if gte mso 9]></table><![endif]-->
<!--[if (mso)|(IE)]></td><![endif]-->
    <!--[if (mso)|(IE)]></tr></table><![endif]-->
    </div>
  =20
  </div>
  <div id=3D"section-6" class=3D"hse-section" style=3D"padding-left:10px; p=
adding-right:10px">
   =20
   =20
    <!--[if !((mso)|(IE))]><!-- -->
      <div class=3D"hse-column-container hse-border" style=3D"min-width:280=
px; max-width:600px; width:100%; Margin-left:auto; Margin-right:auto; borde=
r-collapse:collapse; border-spacing:0; border-left:0px solid #008cc1; borde=
r-right:0px solid #008cc1; box-sizing:border-box; background-color:#FFFFFF"=
 bgcolor=3D"#FFFFFF">
    <!--<![endif]-->
   =20
    <!--[if (mso)|(IE)]>
      <div class=3D"hse-column-container" style=3D"min-width:280px;max-widt=
h:600px;width:100%;Margin-left:auto;Margin-right:auto;border-collapse:colla=
pse;border-spacing:0;">
      <table align=3D"center" style=3D"border-collapse:collapse;mso-table-l=
space:0pt;mso-table-rspace:0pt;width:600px;border-left:0px solid #008CC1;bo=
rder-right:0px solid #008CC1" cellpadding=3D"0" cellspacing=3D"0" role=3D"p=
resentation" class=3D"hse-border" width=3D"600" bgcolor=3D"#FFFFFF">
      <tr style=3D"background-color:#FFFFFF;">
    <![endif]-->
    <!--[if (mso)|(IE)]>
  <td valign=3D"top" style=3D"width:600px;">
<![endif]-->
<!--[if gte mso 9]>
  <table role=3D"presentation" width=3D"600" cellpadding=3D"0" cellspacing=
=3D"0" style=3D"border-collapse:collapse;mso-table-lspace:0pt;mso-table-rsp=
ace:0pt;width:600px">
<![endif]-->
<div id=3D"column-6-0" class=3D"hse-column hse-size-12">
  <table role=3D"presentation" cellpadding=3D"0" cellspacing=3D"0" width=3D=
"100%" style=3D"border-spacing:0 !important; border-collapse:collapse; mso-=
table-lspace:0pt; mso-table-rspace:0pt"><tbody><tr><td class=3D"hs_padded" =
style=3D"border-collapse:collapse; mso-line-height-rule:exactly; font-famil=
y:Arial, sans-serif; font-size:15px; color:#525355; word-break:break-word; =
padding:10px 20px"><div id=3D"hs_cos_wrapper_module-6-0-0" class=3D"hs_cos_=
wrapper hs_cos_wrapper_widget hs_cos_wrapper_type_module" style=3D"color: i=
nherit; font-size: inherit; line-height: inherit;" data-hs-cos-general-type=
=3D"widget" data-hs-cos-type=3D"module"><!--[if gte mso 9]>
<div style=3D"line-height: 0; font-size: 0px">
  <v:rect xmlns:v=3D"urn:schemas-microsoft-com:vml" fill=3D"true" stroke=3D=
"false" style=3D"width:560px; height:2pt;" fillcolor=3D"none">
    <v:fill type=3D"tile"/>
    <v:textbox inset=3D"0,0,0,0">
      <div>
<![endif]-->
<table role=3D"presentation" width=3D"100%" align=3D"center" border=3D"0" s=
tyle=3D"position:relative; top:-1px; min-width:20px; width:100%; max-width:=
100%; border-spacing:0; mso-table-lspace:0pt; mso-table-rspace:0pt; border-=
collapse:collapse; font-size:1px">
  <tbody><tr><td width=3D"100%" valign=3D"middle" style=3D"border-collapse:=
collapse; mso-line-height-rule:exactly; font-family:Arial, sans-serif; font=
-size:15px; color:#525355; word-break:break-word; line-height:0; border:tra=
nsparent; border-bottom:2px solid #EEEEEE; mso-border-bottom-alt:2pt solid =
#EEEEEE; border-bottom-width:2px"><!--[if mso 16]>&nbsp;<![endif]--></td></=
tr>
</tbody></table>
<!--[if gte mso 9]>
      </div>
    </v:textbox>
  </v:rect>
</div>
<![endif]--></div></td></tr></tbody></table>
</div>
<!--[if gte mso 9]></table><![endif]-->
<!--[if (mso)|(IE)]></td><![endif]-->
    <!--[if (mso)|(IE)]></tr></table><![endif]-->
    </div>
  =20
  </div>
  <div id=3D"section-7" class=3D"hse-section" style=3D"padding-left:10px; p=
adding-right:10px">
   =20
   =20
    <!--[if !((mso)|(IE))]><!-- -->
      <div class=3D"hse-column-container hse-border" style=3D"min-width:280=
px; max-width:600px; width:100%; Margin-left:auto; Margin-right:auto; borde=
r-collapse:collapse; border-spacing:0; border-left:0px solid #008cc1; borde=
r-right:0px solid #008cc1; box-sizing:border-box; background-color:#FFFFFF"=
 bgcolor=3D"#FFFFFF">
    <!--<![endif]-->
   =20
    <!--[if (mso)|(IE)]>
      <div class=3D"hse-column-container" style=3D"min-width:280px;max-widt=
h:600px;width:100%;Margin-left:auto;Margin-right:auto;border-collapse:colla=
pse;border-spacing:0;">
      <table align=3D"center" style=3D"border-collapse:collapse;mso-table-l=
space:0pt;mso-table-rspace:0pt;width:600px;border-left:0px solid #008CC1;bo=
rder-right:0px solid #008CC1" cellpadding=3D"0" cellspacing=3D"0" role=3D"p=
resentation" class=3D"hse-border" width=3D"600" bgcolor=3D"#FFFFFF">
      <tr style=3D"background-color:#FFFFFF;">
    <![endif]-->
    <!--[if (mso)|(IE)]>
  <td valign=3D"top" style=3D"width:400px;">
<![endif]-->
<!--[if gte mso 9]>
  <table role=3D"presentation" width=3D"400" cellpadding=3D"0" cellspacing=
=3D"0" style=3D"border-collapse:collapse;mso-table-lspace:0pt;mso-table-rsp=
ace:0pt;width:400px">
<![endif]-->
<div id=3D"column-7-0" class=3D"hse-column hse-size-8">
  <div id=3D"hs_cos_wrapper_module-7-0-0" class=3D"hs_cos_wrapper hs_cos_wr=
apper_widget hs_cos_wrapper_type_module" style=3D"color: inherit; font-size=
: inherit; line-height: inherit;" data-hs-cos-general-type=3D"widget" data-=
hs-cos-type=3D"module"><table class=3D"hse-image-wrapper" role=3D"presentat=
ion" width=3D"100%" cellpadding=3D"0" cellspacing=3D"0" style=3D"border-spa=
cing:0 !important; border-collapse:collapse; mso-table-lspace:0pt; mso-tabl=
e-rspace:0pt">
  <tbody>
    <tr>
      <td class=3D"hs_padded" align=3D"left" valign=3D"top" style=3D"border=
-collapse:collapse; mso-line-height-rule:exactly; font-family:Arial, sans-s=
erif; color:#525355; word-break:break-word; text-align:left; padding:20px 2=
0px 0px; font-size:0px">
        <a href=3D"https://email.wordfence.com/e3t/Ctc/GC+113/cwG7R04/VX3hv=
n72Dfz1W7ByXrv1zyVLZW8QwHkG56Q9XQN1xVmZ83qgyTW6N1vHY6lZ3nYW64c_GY1pYwV3W653=
WQ966W8JBW95fnHh9kY49GW3mZr7m4F1f0gN6dDTLjC47rtW6z-VQl97_qM9W34pzL25pVCRGW3=
GBXXW4T2rVBW2lXm5W9dJXMKW3-9yJ31zmFzlW153-jT5KNxPZN3lLpfhlfMVJW5m8qgr148G-H=
W6QxXF_4rDN-QW4tFJRG8DsGmJW73YHNC311NNFW5LYJTq3Q-Nf9N4qhcSQWYbHzW8p9YVh4_Pk=
K0W6l7_9g65P2dnVnXgzf4VtvDlN941jfXn_MKbf57CVnx04" target=3D"_blank" style=
=3D"color:#00a4bd; mso-line-height-rule:exactly" data-hs-link-id=3D"0">
        <img alt=3D"logo-defiant" src=3D"https://email.wordfence.com/hs-fs/=
hubfs/logo-defiant.png?width=3D200&amp;upscale=3Dtrue&amp;name=3Dlogo-defia=
nt.png" style=3D"outline:none; text-decoration:none; -ms-interpolation-mode=
:bicubic; border:none; max-width:100%; font-size:16px" width=3D"100" align=
=3D"middle" srcset=3D"https://email.wordfence.com/hs-fs/hubfs/logo-defiant.=
png?upscale=3Dtrue&amp;width=3D200&amp;upscale=3Dtrue&amp;name=3Dlogo-defia=
nt.png 100w, https://email.wordfence.com/hs-fs/hubfs/logo-defiant.png?upsca=
le=3Dtrue&amp;width=3D400&amp;upscale=3Dtrue&amp;name=3Dlogo-defiant.png 20=
0w" sizes=3D"(max-width: 100px) 100vw, 100px">
        </a>
      </td>
    </tr>
  </tbody>
</table></div>
<div id=3D"hs_cos_wrapper_module-7-0-1" class=3D"hs_cos_wrapper hs_cos_wrap=
per_widget hs_cos_wrapper_type_module" style=3D"color: inherit; font-size: =
inherit; line-height: inherit;" data-hs-cos-general-type=3D"widget" data-hs=
-cos-type=3D"module"><table role=3D"presentation" class=3D"hse-footer hse-s=
econdary" width=3D"100%" cellpadding=3D"0" cellspacing=3D"0" style=3D"borde=
r-spacing:0 !important; border-collapse:collapse; mso-table-lspace:0pt; mso=
-table-rspace:0pt; font-family:Arial, sans-serif; font-size:12px; line-heig=
ht:135%; color:#23496d; margin-bottom:0; padding:0">
  <tbody>
    <tr>
      <td align=3D"left" valign=3D"top" style=3D"border-collapse:collapse; =
mso-line-height-rule:exactly; font-family:Arial, sans-serif; font-size:15px=
; color:#525355; word-break:break-word; text-align:left; margin-bottom:0; l=
ine-height:135%; padding:10px 20px">
          <p style=3D"mso-line-height-rule:exactly">Defiant, Inc., 1700 Wes=
tlake Ave N STE 200&nbsp;</p>
<p style=3D"mso-line-height-rule:exactly">Seattle, WA &nbsp;98109&nbsp;Unit=
ed States</p>
<p style=3D"mso-line-height-rule:exactly"><a href=3D"https://email.wordfenc=
e.com/hs/manage-preferences/unsubscribe-all?languagePreference=3Den&amp;d=
=3DVnbTNd892TtnVCnbkg45v0QyW3_X4wv3SXQ-tW4h29fm6J4V3XVmWFg54RqnGQN4W4Q9025y=
k1W4L-ZJg8RZTv5VWH6nf7w_Gy0MXk_7QbvXngW6frwCX4Hlr7qW3J6DgB3dyQsv3d612&amp;v=
=3D3&amp;utm_campaign=3DWordfence%20Intelligence%20Marketing&amp;utm_source=
=3Dhs_email&amp;utm_medium=3Demail&amp;utm_content=3D285745251&amp;_hsenc=
=3Dp2ANqtz-_01EKfGqQccMWF3wIVk3EtR-ossS2MyFiPuC2dUnHPlD1IukHLVfHguizt4xxF7M=
4XPcQN8_jh4H6GutmMVwTMaYlGhg&amp;_hsmi=3D285745251" data-unsubscribe=3D"tru=
e" style=3D"color:#00a4bd; mso-line-height-rule:exactly" data-hs-link-id=3D=
"0" target=3D"_blank">Unsubscribe</a> <a href=3D"https://email.wordfence.co=
m/hs/manage-preferences/unsubscribe?languagePreference=3Den&amp;d=3DVnbTNd8=
92TtnVCnbkg45v0QyW3_X4wv3SXQ-tW4h29fm6J4V3XVmWFg54RqnGQN4W4Q9025yk1W4L-ZJg8=
RZTv5VWH6nf7w_Gy0MXk_7QbvXngW6frwCX4Hlr7qW3J6DgB3dyQsv3d612&amp;v=3D3&amp;u=
tm_campaign=3DWordfence%20Intelligence%20Marketing&amp;utm_source=3Dhs_emai=
l&amp;utm_medium=3Demail&amp;utm_content=3D285745251&amp;_hsenc=3Dp2ANqtz-_=
01EKfGqQccMWF3wIVk3EtR-ossS2MyFiPuC2dUnHPlD1IukHLVfHguizt4xxF7M4XPcQN8_jh4H=
6GutmMVwTMaYlGhg&amp;_hsmi=3D285745251" data-unsubscribe=3D"true" style=3D"=
color:#00a4bd; mso-line-height-rule:exactly" data-hs-link-id=3D"0" target=
=3D"_blank">Manage Preferences</a></p>
      </td>
    </tr>
  </tbody>
</table></div>
</div>
<!--[if gte mso 9]></table><![endif]-->
<!--[if (mso)|(IE)]></td><![endif]-->
<!--[if (mso)|(IE)]>
  <td valign=3D"top" style=3D"width:200px;">
<![endif]-->
<!--[if gte mso 9]>
  <table role=3D"presentation" width=3D"200" cellpadding=3D"0" cellspacing=
=3D"0" style=3D"border-collapse:collapse;mso-table-lspace:0pt;mso-table-rsp=
ace:0pt;width:200px">
<![endif]-->
<div id=3D"column-7-1" class=3D"hse-column hse-size-4">
  <div id=3D"hs_cos_wrapper_module-7-1-0" class=3D"hs_cos_wrapper hs_cos_wr=
apper_widget hs_cos_wrapper_type_module" style=3D"color: inherit; font-size=
: inherit; line-height: inherit;" data-hs-cos-general-type=3D"widget" data-=
hs-cos-type=3D"module"><table class=3D"hse-image-wrapper" role=3D"presentat=
ion" width=3D"100%" cellpadding=3D"0" cellspacing=3D"0" style=3D"border-spa=
cing:0 !important; border-collapse:collapse; mso-table-lspace:0pt; mso-tabl=
e-rspace:0pt">
  <tbody>
    <tr>
      <td class=3D"hs_padded" align=3D"center" valign=3D"top" style=3D"bord=
er-collapse:collapse; mso-line-height-rule:exactly; font-family:Arial, sans=
-serif; color:#525355; word-break:break-word; text-align:center; padding:10=
px 20px; font-size:0px">
        <a href=3D"https://email.wordfence.com/e3t/Ctc/GC+113/cwG7R04/VX3hv=
n72Dfz1W7ByXrv1zyVLZW8QwHkG56Q9XQN1xVmZs3qgyTW7lCdLW6lZ3l1W6lKqh33DlRbNVtfk=
Mw2g6BMNW31n_dH2lDJqkN1djBbQG_3J6N1-2Fphvy1QWW5PtFGb8JbqNLW3C7ZwQ8-1jM-W2mB=
K6d7sNXd_W2Vy7B05J2j4TW32vHGB23VNtHW5QXWhd1nn2ctW1xss0n8VShkhW8MrR_P4GBQxtW=
8Tc0dk5s45KvW6XXJFw6fggc9W1krwqs1HB5pMW7sdm97297gr2W76Gw7Q5gjbMHW7hygX-8nrg=
jkW2tjrSK6MJNBwW3tGPnd4fHbHkW7GRMhv4F4q8tVG700Y3_FyQPW1DNfnC1f3qF5f8Xy77204=
" target=3D"_blank" style=3D"color:#00a4bd; mso-line-height-rule:exactly" d=
ata-hs-link-id=3D"0">
        <img alt=3D"ISO_27001" src=3D"https://email.wordfence.com/hs-fs/hub=
fs/ISO_27001.png?width=3D140&amp;upscale=3Dtrue&amp;name=3DISO_27001.png" s=
tyle=3D"outline:none; text-decoration:none; -ms-interpolation-mode:bicubic;=
 border:none; max-width:100%; font-size:16px" width=3D"70" align=3D"middle"=
 srcset=3D"https://email.wordfence.com/hs-fs/hubfs/ISO_27001.png?upscale=3D=
true&amp;width=3D140&amp;upscale=3Dtrue&amp;name=3DISO_27001.png 70w, https=
://email.wordfence.com/hs-fs/hubfs/ISO_27001.png?upscale=3Dtrue&amp;width=
=3D280&amp;upscale=3Dtrue&amp;name=3DISO_27001.png 140w" sizes=3D"(max-widt=
h: 70px) 100vw, 70px">
        </a>
      </td>
    </tr>
  </tbody>
</table></div>
</div>
<!--[if gte mso 9]></table><![endif]-->
<!--[if (mso)|(IE)]></td><![endif]-->
    <!--[if (mso)|(IE)]></tr></table><![endif]-->
    </div>
  =20
  </div>
  <div id=3D"section-8" class=3D"hse-section hse-section-last" style=3D"pad=
ding-left:10px; padding-right:10px; padding-bottom:20px">
   =20
   =20
    <!--[if !((mso)|(IE))]><!-- -->
      <div class=3D"hse-column-container hse-border-bottom hse-border" styl=
e=3D"min-width:280px; max-width:600px; width:100%; Margin-left:auto; Margin=
-right:auto; border-collapse:collapse; border-spacing:0; border-left:0px so=
lid #008cc1; border-right:0px solid #008cc1; box-sizing:border-box; border-=
bottom:0px solid #008cc1; background-color:#FFFFFF" bgcolor=3D"#FFFFFF">
    <!--<![endif]-->
   =20
    <!--[if (mso)|(IE)]>
      <div class=3D"hse-column-container" style=3D"min-width:280px;max-widt=
h:600px;width:100%;Margin-left:auto;Margin-right:auto;border-collapse:colla=
pse;border-spacing:0;">
      <table align=3D"center" style=3D"border-collapse:collapse;mso-table-l=
space:0pt;mso-table-rspace:0pt;width:600px;border-bottom:0px solid #008CC1;=
border-left:0px solid #008CC1;border-right:0px solid #008CC1" cellpadding=
=3D"0" cellspacing=3D"0" role=3D"presentation" class=3D"hse-border-bottom h=
se-border" width=3D"600" bgcolor=3D"#FFFFFF">
      <tr style=3D"background-color:#FFFFFF;">
    <![endif]-->
    <!--[if (mso)|(IE)]>
  <td valign=3D"top" style=3D"width:600px;">
<![endif]-->
<!--[if gte mso 9]>
  <table role=3D"presentation" width=3D"600" cellpadding=3D"0" cellspacing=
=3D"0" style=3D"border-collapse:collapse;mso-table-lspace:0pt;mso-table-rsp=
ace:0pt;width:600px">
<![endif]-->
<div id=3D"column-8-0" class=3D"hse-column hse-size-12">
  <table role=3D"presentation" cellpadding=3D"0" cellspacing=3D"0" width=3D=
"100%" style=3D"border-spacing:0 !important; border-collapse:collapse; mso-=
table-lspace:0pt; mso-table-rspace:0pt"><tbody><tr><td class=3D"hs_padded" =
style=3D"border-collapse:collapse; mso-line-height-rule:exactly; font-famil=
y:Arial, sans-serif; font-size:15px; color:#525355; word-break:break-word; =
padding:10px 20px"><div id=3D"hs_cos_wrapper_module-8-0-0" class=3D"hs_cos_=
wrapper hs_cos_wrapper_widget hs_cos_wrapper_type_module" style=3D"color: i=
nherit; font-size: inherit; line-height: inherit;" data-hs-cos-general-type=
=3D"widget" data-hs-cos-type=3D"module"><div id=3D"hs_cos_wrapper_module-8-=
0-0_" class=3D"hs_cos_wrapper hs_cos_wrapper_widget hs_cos_wrapper_type_ric=
h_text" style=3D"color: inherit; font-size: inherit; line-height: inherit;"=
 data-hs-cos-general-type=3D"widget" data-hs-cos-type=3D"rich_text"><p styl=
e=3D"mso-line-height-rule:exactly; font-size:11px; line-height:175%; text-a=
lign:center" align=3D"center">You're receiving this email because you signe=
d up to the Wordfence WordPress security mailing list.</p></div></div></td>=
</tr></tbody></table>
</div>
<!--[if gte mso 9]></table><![endif]-->
<!--[if (mso)|(IE)]></td><![endif]-->
    <!--[if (mso)|(IE)]></tr></table><![endif]-->
    </div>
  =20
  </div></div>
          </td>
        </tr>
      </tbody></table>
    </div>
 =20
<img src=3D"https://email.wordfence.com/e3t/Cto/GC+113/cwG7R04/VX3hvn72Dfz1=
W7ByXrv1zyVLZW8QwHkG56Q9XQW1xVmKf3D2Fr7122" alt=3D"" width=3D"1" height=3D"=
1" border=3D"0" style=3D"display:none!important;min-height:1px!important;wi=
dth:1px!important;border-width:0!important;margin-top:0!important;margin-bo=
ttom:0!important;margin-right:0!important;margin-left:0!important;padding-t=
op:0!important;padding-bottom:0!important;padding-right:0!important;padding=
-left:0!important"></body></html>
------=_Part_8854552_2021019539.1702045779886--

