This week highlights security risks in popular plugins, focusing on a recurring high-severity LiteSpeed Cache vulnerability affecting millions, along with tips for fixing WordPress lockouts.
#1 – Popular Plugins with High Security Risk
This plugin is actively exploited, with serious vulnerabilities impacting over 6 million sites.
LiteSpeed Cache Plugin
Privilege Escalation; 8.1/10; Update to v6.5.2+
Editor Comment
It’s worth taking a few minutes each week to perform a sites review to catch issues early and wherever possible, use ShieldPRO’s auto-upgrade feature for vulnerable plugins.
#2 – Popular Plugins with Lower Security Risk
The plugins below may not be considered high-severity risks, but they impact a significant number of sites.
FileOrganizer Plugin
Arbitrary File Upload; 7.5/10; Update to v1.1.0+
ReCaptcha Integration for WordPress Plugin
XSS; 7.1/10; Update to v1.2.6+
Element Pack Elementor Addons Plugin
XSS; 6.5/10; Update to v5.10.2+
Download Manager Plugin
XSS; 6.5/10; Update to v3.3.00+
Otter – Gutenberg Block Plugin
XSS; 5.9/10; Update to v3.0.5+
Forminator Plugin
IDOR; 5.3/10; Update to v1.36.1+
Editor Comment
It’s worth taking a few minutes each week to perform a sites review to catch issues early and wherever possible, use ShieldPRO’s auto-upgrade feature for vulnerable plugins.
#3 – Security Flaws in Less Popular Plugins
While the plugins below have lower usage, they still carry serious security risks.
AI Power: Complete AI Pack
Arbitrary File Upload; 10/10; Update to v1.8.90+
BookingPress Plugin
SQL Injection; 8.5/10; Update to v1.1.17+
Subscribe to Comments Plugin
XSS; 7.1/10; Update to v2.3.1+
Easy Pricing Tables Plugin
XSS; 7.1/10; Update to v3.2.6+
Editor Comment
It’s worth taking a few minutes each week to perform a sites review to catch issues early and wherever possible, use ShieldPRO’s auto-upgrade feature for vulnerable plugins.
#4 – Our Blog: Fast Fixes for WordPress Lockouts
Getting locked out of your WordPress site can be stressful, especially during important tasks. Don’t worry—quick, straightforward steps can restore your access in no time.
Thanks for reading, and have a great week!
Paul Goodchild
Shield Security for WordPress
