Super-critical vulnerabilities discovered in several popular plugins.

#1 โ€“ Vulnerable: Brizy โ€“ Page Builder Plugin

Arbitrary File Upload with 80,000 installs.

How will I know Iโ€™m okay?
Upgrade ASAP to v2.4.45+

Whatโ€™s the risk?
Severity risk 9.9/10 โ€“ an attacker can upload any type of file to your site, including backdoors that could gain further access.

Editor Comment
Please use ShieldPROโ€™s auto-upgrade feature for vulnerable plugins.

More Info โ†’

#2 โ€“ Vulnerable: BookingPress Plugin

Another high risk arbitrary file upload vulnerabilityโ€ฆ

How will I know Iโ€™m okay?
Upgrade ASAP to v1.1.6+

Whatโ€™s the risk?
Severity risk 9.9/10 โ€“ Arbitrary File Upload โ€“ an attacker can upload any type of file to your site, including backdoors that could gain further access.

Editor Comment
Please use ShieldPROโ€™s auto-upgrade feature for vulnerable plugins.

More Info โ†’

#3 โ€“ Vulnerable: HUSKY Plugin

Unauthenticated SQL injection!

How will I know Iโ€™m okay?
Upgrade ASAP to v1.3.6.1+

Whatโ€™s the risk?
Severity risk 9.3/10 โ€“ SQL Injection โ€“ an attacker can directly interact with your WP database!

Editor Comment
Please use ShieldPROโ€™s auto-upgrade feature for vulnerable plugins.

More Info โ†’

#4 โ€“ Vulnerable: FV Flowplayer Video Player Plugin

Another high-risk SQL injection risk.

How will I know Iโ€™m okay?
Upgrade ASAP to v7.5.47.7212+

Whatโ€™s the risk?
Severity risk 8.5/10 โ€“ an attacker can directly interact with your WP database!

Editor Comment
Please use ShieldPROโ€™s auto-upgrade feature for vulnerable plugins.

More Info โ†’

#5 โ€“ Vulnerable: Profile Builder & Profile Builder Pro Plugins

Site takeover risk.

How will I know Iโ€™m okay?
Upgrade ASAP to v3.11.9+

Whatโ€™s the risk?
Severity risk 9.8/10 โ€“ an attacker can escalate their low-privileged account to gain higher privileges and take full control of the website.

Editor Comment
Please use ShieldPROโ€™s auto-upgrade feature for vulnerable plugins.

More Info โ†’

#6 โ€“ From Our Blog: SQL Injection Attacks

There are 2 SQL injection vulnerabilities in our round-up today โ€“ they present serious risks to your site, so if you want to understand them a bit more, read on using the link below.

More Info โ†’

Thanks for reading, and have a great week!

Paul Goodchild
Shield Security for WordPress