The developers at Oxygen started investing the disclosed vulnerability and while creating a security patch update, they encountered an additional related vulnerability that was not initially reported to us.
Until date, these vulnerabilities have not been exploited in the wild and therefore, Oxygen users would have some time to update Oxygen Builder to the latest version.
Oxygen 3.1.1 is a security patch specifically for these vulnerabilities and contains no other changes. We are not releasing a changelog or any more details until Oxygen users have had sufficient opportunity to update their sites.
We recommend all Oxygen users to update your Oxygen sites to version 3.1.1 immediately. Here's how you can do that easily:
Automatically Update Oxygen Builder Plugin
Check The License Keys
Go to Oxygen » Settings » License and make sure your license key is entered. Once your key is entered (and even if it was already present), click “Submit” and ensure you see the “valid” response next to the input box. This is an important step to ensure that you are able to update to the latest Oxygen Builder plugin.
Get The Latest Version
Head over to Dashboard » Updates in the WordPress admin panel and, if the Oxygen update isn’t already visible in the plugin update section, click “Check Again” until the update appears. By default, you don't have to request a check again as it is automated.
Updating Oxygen Builder
Once you are prompted with the upgrade, tick the box next to Oxygen in the plugin update section and click “Update Plugins”.
Here's the last step. Head over to the Plugins page in the WordPress admin panel and verify that Oxygen’s version number is 3.1.1.
Manually Update Oxygen Builder Plugin
Login To Oxygen Backend
Go to Oxygen Builder backend and click “Download Oxygen”.
Download Latest Oxygen Builder
In the list of purchases, find your Oxygen purchase and click “View Details and Downloads”.
Download The Relevant Files
Under the “Products” heading, find the download link for Oxygen 3.1.1 and download the zip file (if you use Safari, please switch to Chrome or Firefox to download the file to avoid the file being unzipped automatically).
Login to WP Admin
Log into your WordPress site and go to the Plugins page in the WordPress admin panel.
Disable Old Oxygen Builder
Find Oxygen and click “Deactivate”, then “Delete”.
Install The Latest Oxygen Builder
At the top of the Plugins page, click “Add New”, and then “Upload Plugin”.
Upload Oxygen Builder
Click “Choose File” and select the Oxygen 3.1.1 zip file you just downloaded.
Activate Oxygen Builder
Once the plugin is finished installing, make sure to activate it.
Clear WordPress Cache After Installation
Lastly, remember to clear your WordPress cache to ensure that all old files are removed and a new cache is generated for your site. Read this guide on how to clear WordPress cache if you need any assistance.