Who did it?

It's more common than people think. Remember the SolarWinds hack? All the big enterprises and government agencies use SolarWinds to monitor their servers and applications. They put an agent on every server.

The Russians got their malware into the source from the vendor and then had instant access to everything. It was a hell of a panic when that happened, just like when RSA tokens were compromised. My boss at Lockheed Martin was panicked to death.

Never did understand how that little dweeb got into his position. The solution to a problem is never panic.

Just got an email from the Buddy Boss team acknowledging the issue and releasing a hotfix and advice.

We want to be transparent with you about a security issue we recently identified and have resolved.

A vulnerability was introduced after one of our servers was compromised. We identified this quickly, released a hotfix, and have taken steps to secure our environment.

If you have WordPress automatic updates enabled, or manually updated to either of the versions below, please make sure you are running the latest versions:

- BuddyBoss Platform v2.20.4
- BuddyBoss Theme v2.19.3

A small percentage of sites running BuddyBoss were affected. However, out of caution, we are recommending that all customers take the following steps regardless of whether your site showed any signs of impact:

1. Change your WordPress database username and password (wp-config / MySQL) - [link]
2. Regenerate your WordPress SALT keys (wp-config) - [link]
3. Rotate any Stripe or payment gateway API keys connected to your site (Stripe Dashboard > Developers > API Keys)

If you are unsure how to complete any of these steps, our support team is happy to help or your hosting company should be able to assist.

We take the security of your site seriously, and we wanted to reach out as soon as we had enough information to give you clear steps to take. We will share a full update once our investigation is complete.

Thank you for your trust in BuddyBoss.

Graham from BuddyBoss.