Vulnerable plugins and themes are the #1 reason WordPress websites get hacked. Our WordPress Vulnerability Report powered by WPScan covers recent WordPress plugin, theme, and core vulnerabilities, and what to do if you run one of the vulnerable plugins or themes on your website.
Each vulnerability will have a severity rating of low, medium, high, or critical. Responsible disclosure and reporting of vulnerabilities is an integral part of keeping the WordPress community safe. Please share this post with your friends to help get the word out and make WordPress safer for everyone!
WordPress Plugin Vulnerabilities
Due to the size of the active install base of the Elementor Website Builder plugin, along with the critical nature of the vulnerability, this report is a special edition of our regular weekly WordPress Vulnerability Report. Any site running the Elementor Website Builder plugin needs to update to version 3.6.3+ immediately!
Note: The POC will be displayed on May 07, 2022, to give users the time to update.
Elementor
- Plugin
- Elementor Website Builder
- Installations
- 5,000,000+
- Vulnerability
- Subscriber+ Arbitrary File Upload in Versions 3.6.0 – 3.6.2
- Patched in Version
- 3.6.3
- Severity Score
- Critical
Each week, the team at iThemes team publishes new WordPress tutorials and resources, including the Weekly WordPress Vulnerability Report. Since 2008, iThemes has been dedicated to helping you build, maintain, and secure WordPress sites for yourself or for clients. Our mission? Make People’s Lives Awesome.
