ShieldNOTES Ep#33: Recent Vulnerabilities, Upcoming WP Agency Summit & Important Update From Shield’s Team

September 23, 2024 by Paul G. | Security, ShieldNOTES

This week’s vulnerabilities underscore the need to stay informed.

Don’t miss the notice about switching to PHP 7.4.

#1 – Vulnerable: MC4WP: Mailchimp Plugin

2+ million sites affected with malicious script injection.

How will I know I’m okay?
Upgrade ASAP to v4.9.17+

What’s the risk?
Severity risk 7.1/10 – XSS – allowing injection of malicious scripts into website that guests may execute.

Editor Comment
Please use ShieldPRO’s auto-upgrade feature for vulnerable plugins.

More Info →

Unauthorised access escalation risk.

How will I know I’m okay?
Upgrade ASAP to v3.3.0+

What’s the risk?
Severity risk 8.8/10 – Privilege Escalation – an attacker can gain full access to a site by escalating their low user privileges.

Editor Comment
Please use ShieldPRO’s auto-upgrade feature for vulnerable plugins.

More Info →

#3 – Vulnerable: WCFM Marketplace Plugin

Plugin actively exploited with XSS but no official fix yet.

How will I know I’m okay?
No fix available yet; please replace or monitor for updates.

What’s the risk?
Severity risk 7.1/10 – XSS – allowing injection of malicious scripts into website that guests may execute.

Editor Comment
Please use ShieldPRO’s auto-upgrade feature for vulnerable plugins.

More Info →

#4 – WordPress Agency Summit 2024

A free online event starting this Friday, September 27th, will offer practical tips for building and optimizing fast, dynamic WordPress sites, covering topics like server optimization and security.

How can I get involved?
You can join the LiveStreams when they’re announced.

More Info →

#5 – Important Notice: Shield Security Will Require PHP 7.4+

Shield Security will soon need minimum PHP 7.4 to improve performance and take advantage of new PHP features, while continuing to support most users. Make sure to back up your site and talk to your web host about upgrading.

More Info →

Thanks for reading, and have a great week!

Paul Goodchild
Shield Security for WordPress

Hello dear reader!

If you want to level-up your WordPress security with ShieldPRO, click to get started today. (risk-free, with our no-quibble 14-day satisfaction promise!)

You'll get all PRO features, including AI Malware Scanning, WP Config File Protection, Plugin and Theme File Guard, import/export, exclusive customer support, and much, much more.

We'd be honoured to have you as a member, and look forward to serving you during your journey towards powerful, WordPress security.

Try ShieldPRO Today →

ShieldPRO Testimonials

@afruin

How is the best also the cheapest!?!?!

I have gone to great effort to find the best security period. That can be a daunting and impractical undertaking but after almost a year of testing I have settled on Shield Security. Not perfect, not simple, but simply the best I could find. I have only found one feature…

@adpronaugle

GREAT JOB

This plugin worked really well for me. Thanks

@samharra81

Newbie to it

I’m new to this plugin but so far has been doing the trick!

@bhess4

Shield Security for WordPress

In my honest opinion Shield Security for WordPress deserves a 5 star rating because it is one of the best additions I’ve made to my WordPress sites. They are all more secure since adding it.

Comments (2)

Lana

September 26, 2024 10:10 am

Thank you for sharing our event 🙂

Jelena M.

September 26, 2024 12:21 pm

You’re very welcome, Lana. We’re glad to help spread the word.

Your dedication to supporting the WordPress community—something we all care about—is truly impressive.

Warm regards from the Shield Security crew.🙂

ESSENTIAL WORDPRESS SECURITY NEWS

Get ShieldNOTES, our excellent weekly WordPress security newsletter!

ShieldNOTES Ep#33: Recent Vulnerabilities, Upcoming WP Agency Summit & Important Update From Shield’s Team

#1 – Vulnerable: MC4WP: Mailchimp Plugin

#3 – Vulnerable: WCFM Marketplace Plugin

#4 – WordPress Agency Summit 2024