Security Updates Available

 

Hi rthyrty,

 

Today we have released multiple OceanWP product updates. Most updates are regular product updates, while 3 plugin releases contain security-related fixes:

• Ocean Extra v2.6.0
• Ocean Pro Demos v1.5.5
• Ocean eComm Treasure Box (Ocean eCommerce Pro) v1.8.1

 

An additional Ocean Extra (v2.6.1) security update is also expected later this week. To avoid sending several security emails within a few days, we're consolidating these notices here.

 

What You Should Know

Having any or all of these plugins installed or active does not make your website vulnerable by default.

 

To reproduce these issues, specific conditions must be present and particular functionality must be used in a specific way. Their existence also does not mean that your website has been compromised. Most importantly, at this time, there are no indications that these issues are being probed or exploited.

 

Nonetheless, we recommend updating as soon as you're able to.

Why You're Receiving This Notice

At OceanWP we have always treated security-related fixes as a priority and disclosed them clearly in our product changelogs.

 

What is changing is how we notify you about them. Going forward we'll also notify our users directly whenever an OceanWP release contains a security patch, regardless of its reported severity or practical impact.

 

Security disclosure practices have evolved, and we no longer want to rely solely on third-party publication timelines when deciding when to notify our users. Direct notifications give you more time to install available security patches before additional technical details may become public. Therefore, receiving these notices doesn't automatically mean an issue is critical, actively exploited, or applicable to every website using the product.

 

It simply means that an update containing a security patch is available.

How to Update

• Log in to your WordPress dashboard,
• Navigate to Plugins > Installed Plugins, and
• Update plugins to their latest available versions.

 

No additional steps and/or configuration changes are required after updating.

 

Depending on your website's setup, if you need to manually download the latest versions of Ocean Pro Demos and/or Ocean eComm Treasure Box:

• Log in to your Customer Account,
• Go to section Downloads,
• Download latest plugin versions to your PC.
• Log in to your website,
• Go to Plugins > Add New,
• Select the plugin ZIP files you downloaded to your PC, then upload. If prompted, choose to replace the current version with the uploaded version.

 

Repeat the procedure for each plugin. Do not unzip the files before the upload. You also don't need to remove the previous plugin versions from your website.

Too Many Things to Keep an Eye On?

If you're running a small business, keeping track of WordPress updates, site health, performance, and routine checks can quickly become another job on your list.

 

Our Health & Monitoring Services for WordPress Websites are designed for busy website and business owners who want regular oversight while they focus on running their business.