March 4, 2024 by Paul G. | Security, ShieldNOTES

ShieldNOTES Ep#3: Your Monday Morning Security Notes

There’s been a few big vulnerabilities in the past week, and we’ve got a big WP event you might want to “plugin-to” 😉

#1 – Vulnerability: Ultimate Member Plugin

Scoring 9.3/10 in severity, over 200K+ installations, and going back all the way to 2020, it’s a big one!

How will I know I’m okay?
Upgrade the plugin to at least v2.8.3

Editor Comment
If you use ShieldPRO’s automatic upgrader for vulnerable plugins/themes, this will be done automatically for you.

More Info →

#2 – Vulnerability: Brizy Page Builder Plugin

Scoring a whopping 9.9/10 in severity, over 80K+ installations, it’s another big one!

How will I know I’m okay?
Upgrade the plugin to at least v2.4.41

Editor Comment
If you use ShieldPRO’s automatic upgrader for vulnerable plugins/themes, this will be done automatically for you.

More Info →

#3 – Vulnerability: Lightspeed Cache Plugin

With 5M+ installations, chances are high you have this running somewhere.

How will I know I’m okay?
Upgrade the plugin to at least v5.7.0.1

Editor Comment
If you use ShieldPRO’s automatic upgrader for vulnerable plugins/themes, this will be done automatically for you.

More Info →

#4 – All About TimThumb +Exclusive

You’ll have heard of timthumb – people still talk about it.

Why Is This Important?
Broad understanding of WP vulnerabilities, how they come about, and how much the ecosystem has matured is great to know!

Editor Comment
We even get a quote directly from Ben Gillock, the original TimThumb developer, for the piece!

More Info →

#5 – WordCamp Asia Kicks Off This Week

How can I get involved?
If you’re heading to the event you can usually join the LiveStreams when they’re announced.

Editor Comment
We won’t be at WC Asia, but we might see you at WCEU!

More Info →

Have a wonderful week!

Paul Goodchild
Shield Security for WordPress

Hello dear reader!

If you want to level-up your WordPress security with ShieldPRO, click to get started today. (risk-free, with our no-quibble 14-day satisfaction promise!)

You'll get all PRO features, including AI Malware Scanning, WP Config File Protection, Plugin and Theme File Guard, import/export, exclusive customer support, and much, much more.

We'd be honoured to have you as a member, and look forward to serving you during your journey towards powerful, WordPress security.

Try ShieldPRO Today →

ShieldPRO Testimonials
@annajutta's Gravatar @annajutta

great

This plugin really helps me a lot, before I installed I got hacked a couple of time and it was a nightmare, now I seem to have control over the sight, thank you sooo much

@jodyshop's Gravatar @jodyshop

Very powerful All-in-one security solution

This plugin is awesome! Very powerful All-in-one security solution. Provide almost everything you need to become safe and secure. The Firewall caught too many Hack attempts with base64 codes and other malicious visits targeting my Jodyshop.com website. Of course, I bought the Pro version once I found it very useful…

@grant-allman's Gravatar @grant-allman

Good for beginners

I am a very uneducated user. I put the software in and it is working. No great learning curve on my part.

@czilian's Gravatar @czilian

Not simple but comprehensive

Great tool. Easy to install, provides good protection (as far I can judge) and responsive on the support ticker! Additional security functionality well thought through.

Leave a Comment

Your email address will not be published. Required fields are marked *

Click to access the login or register cheese