This edition features a selection of WordPress plugins and themes facing exceptionally serious vulnerabilities, led by recurring high severity risks affecting over 1.4 million sites using Broken Link Checker and W3 Total Cache. On the prevention side, we’re revisiting how to keep your plugins secure and running smoothly.
#1 – Critical Security Risks in Popular Plugins and Themes
Vulnerabilities affecting these plugins and themes pose a significantly high security risk to over 11 million sites. One quick update can save you from a much bigger headache later.
Broken Link Checker Plugin
RCE; 10/10; Update to v2.4.12+; Recurring 2×
W3 Total Cache Plugin
Path Traversal; 9.8/10; Update to v2.10.5+; Recurring 8×
TheGem (Elementor) Theme
SQL Injection; 9.3/10; Update to v5.12.3.1+
Depicter Slider Plugin
Arbitrary File Upload; 9.1/10; Update to v4.8.0+; Recurring 2×
Elementor Pro Plugin
Arbitrary File Upload; 9.0/10; Update to v4.2.2+; Recurring 4×
Editor Comment
It’s worth taking a few minutes each week to perform a sites review to catch issues early and wherever possible, use ShieldPRO’s auto-upgrade feature for vulnerable plugins.
#2 – Critical Security Risks in Less Popular Plugins
The plugins below also carry serious risks for more than 140,000 sites. Prevention starts with keeping all your plugins updated.
Gift Cards For WooCommerce Pro Plugin
Arbitrary File Upload; 10/10; Update to v4.2.10+; Recurring 2×
Ajax Search Lite Plugin
PHP Object Injection; 9.8/10; Update to v4.14.5+; Recurring 2×
User Registration & Membership Pro Plugin
Broken Authentication; 9.8/10; Update to v5.4.6+
Link Library Plugin
SQL Injection; 9.3/10; Update to v7.9.3+; Recurring 4×
BookingPress Appointment Booking Pro Plugin
SQL Injection; 9.3/10; Update to v6.1+; Recurring 3×
Editor Comment
It’s worth taking a few minutes each week to perform a sites review to catch issues early and wherever possible, use ShieldPRO’s auto-upgrade feature for vulnerable plugins.
#3 – Our blog: How to Keep Plugins in Check
Learn effective WordPress plugin management strategies. Discover when to update, replace, or remove plugins to maintain optimal site performance and security.
Thanks for reading, and have a wonderful week!
Paul Goodchild
Shield Security for WordPress
