Hello!
We are here to announce an important security update and request you all to update the Ultimate Addons for Beaver Builder to version 1.24.1 immediately.
What happened?
The team at MalCare pointed out a bug in the plugin after which we worked on it, fixed this vulnerability and released an update in under 7 hours.
Our heartfelt gratitude towards the MalCare team to have helped us identify an issue that we could work on immediately.
The Ultimate Addons for Beaver Builder (UABB) version 1.24.1 is the most secure version of the plugin.
Immediate Action Required!
This is a security update, and therefore, it is highly recommended that you update the Ultimate Addons for Beaver Builder to the latest version now!
Not able to update the plugin?
Here’s how you can do it manually –
- Download the latest version of the Ultimate Addons for Beaver Builder
- Uninstall the previous version from your website (Deactivate and Delete). Don’t worry you won’t lose any data.
- Install the Latest Version of the Ultimate Addons that you just downloaded.
Fighting Security Vulnerabilities Together!
Security is a continuous process and should be managed regularly with regular checks and updates.
While we try our best to keep security issues away, we do not assume that they will never come. We take this up to identify them, debug the cause and release an update as soon as possible.
And, we just did it!
We highly recommend our users to activate their license, so that they do not miss on such update notifications and can update the Ultimate Addons for Beaver Builder with a single click.
Having said this, we assure continuous assistance and commitment to providing quality and stronger security. We are constantly working to make sure our products are secure and reliable.
Have any further questions about this update? Please feel free to get in touch with us or write to us at support[at]bsf[dot]io
Hi,
When I do the update, I get an error saying Beaver Builder isn’t able to save changes. I went through the process of disabling and re-enabling plug-ins and found that UABB is definitely the cause.
Has this been reported by anyone else? Is there another update planned soon?
Hello Dave,
We have come across and neither have we heard of such an issue before. Could you please open up a ticket at our support center, so that we can take a closer look and help?
Yes… I cannot do anything either. I cant even look at the ADDON.
Hello Heather,
As Elvina mentioned there’s no such issue due to UABB encountered recently.
Do reach out to us on our support center, so that we can take a look and help you out accordingly.
Hello, I think you’re misunderstood. We sent an email to all our customers as soon as we released a patch. Moreover, we sent another reminder email after 24 hours just to make sure everyone will get a notification. The changelog has a mention of the security fix as well.
Can you please publish the fix to this vulnerability for the hundreds of thousands of people who might have been hacked?
All you need to do is just update the plugin to the latest version. We have already patched the vulnerability in the latest version of the plugin.
In order for hackers to exploit this vulnerability, they need to know the email address of existing registered users. If they don’t know the email address of existing users such as admin, they would most likely just end up creating a “subscriber” level account, which has almost zero permissions to do anything on a website.
If you believe your website was hacked due to vulnerably in our plugin, kindly accept our sincere apologies. We understand it is difficult to have a website hacked. We try our best to build secure products and this is a very first instance our plugin had a critical security vulnerability. As a further precaution, we have involved a third-party security audit company to review the entire codebase, so we can get external feedback and make other improvements where necessary.
To clean a hacked website, I would highly recommend Malcare’s Malware Cleaning Service. If you prefer to do it yourself, please refer a blog post here.
This update completely broke our modules for UABB and was very frustrating. We need to downgrade to the vulnerable version now.
Hello Rob,
Sorry about the inconvenience!
But the recent version breaking your website that’s strange. We will be reaching out to you through your Email ID and also have answered your above raised concerns. Do reach out with your details for further help.
We will recommend always to get in touch through our Support Portal as we are hardly available on comments.
Will it work fine? Can I use it now in my WordPress website with my other’s daily uses plugin?
Hello Kevin,
Yes, definitely it would work fine without any issues. It always recommended updating to security updates immediately.