ShieldNOTES Ep#15: Fluent Forms & Memberpress Vulnerabilities; All about XML-RPC; Google Recommends WP 6.5

May 27, 2024 by Paul G. | Security, ShieldNOTES

Many vulnerabilities were published in the last week, with Fluent Forms having the most severe.

We get asked about XML-RPC a lot, so we wrote a helpful blog article to break it all down for you (see below)

#1 – Vulnerable: Fluent Forms

Critical site-takeover vulnerability with 400,000+ installs.

How will I know I’m okay?
Upgrade ASAP to v5.1.17+

What’s the risk?
Severity risk 9.8/10 – privilege escalation – an attacker can raise the privileges of an account and take full site control!

Editor Comment
Please use ShieldPRO’s auto-upgrade feature for vulnerable plugins.

More Info →

#2 – Vulnerable: Memberpress

How will I know I’m okay?
Upgrade ASAP to v1.11.30+

What’s the risk?
XSS allowing injection of malicious scripts into website that guests may execute.

Editor Comment
Please use ShieldPRO’s auto-upgrade feature for vulnerable plugins.

More Info →

#3 – From our blog: All About Securing XML-RPC

This article outlines all you might want to know about XML-RPC and how you can use Shield to lock it down without interrupting normal site functionality.

More Info →

WordPress 6.5 includes support for the ‘lastmod‘ element in sitemap files. This feature improves crawl efficiency and reduces server load.

If Google doesn’t need to repeatedly crawl your site, that’s a great thing!

More Info →

Hello dear reader!

If you want to level-up your WordPress security with ShieldPRO, click to get started today. (risk-free, with our no-quibble 14-day satisfaction promise!)

You'll get all PRO features, including AI Malware Scanning, WP Config File Protection, Plugin and Theme File Guard, import/export, exclusive customer support, and much, much more.

We'd be honoured to have you as a member, and look forward to serving you during your journey towards powerful, WordPress security.

Try ShieldPRO Today →

ShieldPRO Testimonials

@grntrmd1800

Best Security Plugin I’ve Tried So Far

I’ve tried a handful of other security plugins (including the heavyweight, prominent ones) and this is the best security plugin I’ve found so far. It has effective spam protection and has helped me to mitigate brute-force login attempts on more than one occasion. The login security is top-notch and I…

@greweidi

Best plugin * ever * – no more attack!!

I hade several DoS-attacks on my website, which slowed down performance significantly. This plugin finally helped me to end these attacks. It’s easy to handle and very reliable. Thank you very much, developers!!

@heritagetiling

brilliant plugin

I used the Co to remove a hack and then set up the premium version . Great so far plenty of info and no more hacks.

@ashishpatel1992

Excellent Plugin

Secures your website from malicious attacks. Thanks for this wonderful plugin 🙂

ESSENTIAL WORDPRESS SECURITY NEWS

Get ShieldNOTES, our excellent weekly WordPress security newsletter!

ShieldNOTES Ep#15: Fluent Forms & Memberpress Vulnerabilities; All about XML-RPC; Google Recommends WP 6.5

#1 – Vulnerable: Fluent Forms

#2 – Vulnerable: Memberpress