Vulnerable plugins and themes are the #1 reason WordPress websites get hacked. Our WordPress Vulnerability Report powered by WPScan covers recent WordPress plugin, theme, and core vulnerabilities, and what to do if you run one of the vulnerable plugins or themes on your website.
Each vulnerability will have a severity rating of low, medium, high, or critical. Responsible disclosure and reporting of vulnerabilities is an integral part of keeping the WordPress community safe. Please share this post with your friends to help get the word out and make WordPress safer for everyone!
WordPress Plugin Vulnerabilities
Due to the size of the active install base of the Ninja Forms plugin, along with the critical nature of the vulnerability, the WordPress core team issued a forced security update last week. Any site running the Ninja Forms plugin needs to make sure their site has been successfully updated to version 3.6.11+ immediately!
Ninja Forms
- Installations
- 1,000,000+
- Vulnerability
- Unauthenticated PHP Object Injection
- Patched in Version
- 3.6.11
- Severity Score
- Critical
The PoC will be displayed on July 15, 2022, to give users time to update.
Each week, the team at iThemes team publishes new WordPress tutorials and resources, including the Weekly WordPress Vulnerability Report. Since 2008, iThemes has been dedicated to helping you build, maintain, and secure WordPress sites for yourself or for clients. Our mission? Make People’s Lives Awesome.
