There are a few security vulnerabilities that may need your attention, and check out what’s coming in Shield 20.1.
#1 – Popular Plugins with Lower Security Risk
These plugins’ risks levels are low, but their impact is widespread.
FileOrganizer Plugin
Path Traversal; 7.2/10; Update to v1.1.5+
FluentForm Plugin
XSS; 5.9/10; Update to v5.2.1+
Editor Comment
It’s worth taking a few minutes each week to perform a sites review to catch issues early and wherever possible, use ShieldPRO’s auto-upgrade feature for vulnerable plugins.
#2 – Security Risks in Less Popular Plugins
These plugins, despite limited use, bring significant security risks.
WP Umbrella: Update Backup Restore & Monitoring Plugin
Local File Inclusion; 9.8/10; Update to v2.17.1+
KiviCare Plugin
SQL Injection; 9.3/10; Update to v3.6.5+
Swift Performance Lite Plugin
Path Traversal; 8.1/10; Update to v2.3.7.2+
Video Gallery – YouTube Gallery Plugin
SQL Injection; 7.6/10; Update to v2.4.3+
Editor Comment
It’s worth taking a few minutes each week to perform a sites review to catch issues early and wherever possible, use ShieldPRO’s auto-upgrade feature for vulnerable plugins.
#3 – Our blog: The Role of Firewalls in WooCommerce Security
Firewalls serve as the first line of defense against cyber threats, monitoring and filtering incoming traffic to your WooCommerce site. Learn about different firewall types and implementation for optimal security.
#4 – Due Soon: Shield Security PRO 20.1
As we mentioned some time ago, Shield v20.1 will require PHP 7.4+ to run.
This release also introduces a cleaner UI, “Security Profiles”, Auto-Integrations and an updated Guided Setup Wizard.
Thanks for reading, and have a great week!
Paul Goodchild
Shield Security for WordPress
