WordPress Vulnerability Report, Special Edition – April 14, 2022: Critical Vulnerability in Elementor
Vulnerable plugins and themes are the #1 reason WordPress websites get hacked. Our WordPress Vulnerability Report powered by WPScan covers recent WordPress plugin, theme, and core vulnerabilities, and what to do if you run one of the vulnerable plugins or themes on your website. Each vulnerability will have a severity rating of low, medium, high, or critical.
Vulnerable plugins and themes are the #1 reason WordPress websites get hacked. Our WordPress Vulnerability Report powered by WPScan covers recent WordPress plugin, theme, and core vulnerabilities, and what to do if you run one of the vulnerable plugins or themes on your website.
Each vulnerability will have a severity rating of low, medium, high, or critical. Responsible disclosure and reporting of vulnerabilities is an integral part of keeping the WordPress community safe. Please share this post with your friends to help get the word out and make WordPress safer for everyone!
WordPress Plugin Vulnerabilities
Due to the size of the active install base of the Elementor Website Builder plugin, along with the critical nature of the vulnerability, this report is a special edition of our regular weekly WordPress Vulnerability Report. Any site running the Elementor Website Builder plugin needs to update to version 3.6.3+ immediately!
Note: The POC will be displayed on May 07, 2022, to give users the time to update.
Elementor
- Plugin:
- Elementor Website Builder
- Installations:
- 5,000,000+
- Vulnerability:
- Subscriber+ Arbitrary File Upload in Versions 3.6.0 – 3.6.2
- Patched in Version:
- 3.6.3
- Severity Score:
- Critical
Get SolidWP tips direct in your inbox
Sign up
Get started with confidence — risk free, guaranteed
Join us for the next Solid Academy Webinar!
Free weekly webinars that will help you master WordPress and increase your business's bottom line.
What is a WordPress Phishing Attack?
Learn how to identify and prevent phishing attacks on WordPress websites.
Kiki SheldonWebsite Protection: 5 Ways to Keep Your Website Safe
Robust website protection is the shield that stands between your business and relentless cyber attacks. Prioritizing website protection enables businesses to fortify defenses to safeguard their online presence and preserve the trust of their customers in the face of ever-evolving cybersecurity threats.
Kiki Sheldon23 Ideas To Grow Your WordPress Business in 2023
WordPress is the most popular website-building platform worldwide, trusted by numerous brands. WordPress enables you to build a user-friendly and highly reliable site, together with tools and plugins to enhance your marketing and work like a lead magnet. All these features make WordPress the platform chosen by more than 43% of businesses globally.
SolidWP Editorial TeamSign up now — Get SolidWP updates and valuable content straight to your inbox
Sign up
Get started with confidence — risk free, guaranteed
