CIT

If your business website runs on WordPress, here’s a quick check for you 🔎

There’s a popular plugin called Quiz and Survey Master (QSM).

It’s used by more than 40,000 websites to create quizzes, surveys and forms without needing any coding.

Unfortunately, versions 10.3.1 and older were recently found to have a serious security flaw.

The issue is what’s known as an SQL injection vulnerability.

SQL is the language used to talk to a website’s database, the part that stores things like user accounts, submissions, and other important data.

An SQL injection flaw means someone can sneak malicious commands into that database.

In this case, any logged-in user, even someone with a basic subscriber account, could potentially inject commands into the system.

That could allow actions like:

🚫 Accessing sensitive data
🚫 Extracting information from the database
🚫 Manipulating content

The vulnerability is tracked as CVE-2025-67987, and it was fixed in version 10.3.2.

The latest version available is 10.3.5, which is the safest bet.

Based on WordPress.org data, just over half of websites using QSM are on version 10.3. That means a large number are likely still vulnerable.

That’s potentially tens of thousands of sites.

Right now, there’s no confirmed evidence of this flaw being actively exploited. But once a vulnerability is public, attackers often start scanning the internet looking for unpatched sites.

👉 If your site uses this plugin, the solution is straightforward: Update it immediately 👈

More broadly, this is a reminder of something I say often to business owners: WordPress itself isn’t usually the weak link. It’s the plugins.

Every plugin you install adds functionality but also adds potential risk.

If you’re not actively using a plugin or theme, it shouldn’t just be deactivated. It should be deleted from the server completely.

Websites aren’t a set and forget asset. They’re part of your digital infrastructure.

If they’re vulnerable, they can become an entry point into your wider systems. Especially if admin accounts reuse passwords across services.

❓ When was the last time someone checked which plugins your website is running and whether they’re fully up to date?

If you spend a big chunk of your week inside Microsoft Teams, small changes can make a surprisingly big difference.

There are a few new features on the way that are worth knowing about, especially if meetings and collaboration are part of your daily routine.

Let’s start with the one I think many people will love 💛

You’ll soon be able to hide the entire meeting control toolbar.

You know the bar at the top or bottom of a Teams meeting with mute, camera, share screen, leave, and so on?

That can now be completely hidden, giving you more screen space during meetings.

If you’re presenting, reviewing a spreadsheet, or looking at detailed content, that extra space matters. It feels cleaner and less cluttered.

And this isn’t just a one-time setting. If you choose to hide it, that preference sticks across meetings.

Worried you’ll lose control?

You won’t.

You can bring the toolbar back instantly by hovering your mouse or pressing the Tab key.

Keyboard shortcuts for things like mute still work whether the bar is visible or not.

It’s a small tweak, but it makes Teams feel less intrusive and more focused.

There’s also an upgrade coming to the image viewer 🔎

If someone shares multiple images in a chat, you’ll be able to scroll through all of them in one place.

Even better, the viewer will show the original message header so you can jump straight back to where that image was posted.

If you’ve ever scrolled endlessly trying to find that screenshot from last week, this will help 📸

Another subtle improvement: Your recently used emojis will sync across Windows and mobile.

It sounds minor, but if you use the same handful of emojis regularly (and most of us do), not having to re-find them saves time and friction 🤩

For those who share code snippets in Teams, there are also improvements to code blocks.

Better keyboard navigation, line numbers, and the ability to set the code language more easily.

That makes technical collaboration smoother and reduces confusion when discussing specific lines.

When tools get slightly easier to use every day, productivity improves without anyone noticing why.

❓ If you and your people live in Teams, which would you value more, cleaner meetings, faster navigation, or smarter collaboration features?