ShieldNOTES Ep#33: Recent Vulnerabilities, Upcoming WP Agency Summit & Important Update From Shield’s Team

September 23, 2024 by Paul G. | Security, ShieldNOTES

This week’s vulnerabilities underscore the need to stay informed.

Don’t miss the notice about switching to PHP 7.4.

#1 – Vulnerable: MC4WP: Mailchimp Plugin

2+ million sites affected with malicious script injection.

How will I know I’m okay?
Upgrade ASAP to v4.9.17+

What’s the risk?
Severity risk 7.1/10 – XSS – allowing injection of malicious scripts into website that guests may execute.

Editor Comment
Please use ShieldPRO’s auto-upgrade feature for vulnerable plugins.

More Info →

Unauthorised access escalation risk.

How will I know I’m okay?
Upgrade ASAP to v3.3.0+

What’s the risk?
Severity risk 8.8/10 – Privilege Escalation – an attacker can gain full access to a site by escalating their low user privileges.

Editor Comment
Please use ShieldPRO’s auto-upgrade feature for vulnerable plugins.

More Info →

#3 – Vulnerable: WCFM Marketplace Plugin

Plugin actively exploited with XSS but no official fix yet.

How will I know I’m okay?
No fix available yet; please replace or monitor for updates.

What’s the risk?
Severity risk 7.1/10 – XSS – allowing injection of malicious scripts into website that guests may execute.

Editor Comment
Please use ShieldPRO’s auto-upgrade feature for vulnerable plugins.

More Info →

#4 – WordPress Agency Summit 2024

A free online event starting this Friday, September 27th, will offer practical tips for building and optimizing fast, dynamic WordPress sites, covering topics like server optimization and security.

How can I get involved?
You can join the LiveStreams when they’re announced.

More Info →

#5 – Important Notice: Shield Security Will Require PHP 7.4+

Shield Security will soon need minimum PHP 7.4 to improve performance and take advantage of new PHP features, while continuing to support most users. Make sure to back up your site and talk to your web host about upgrading.

More Info →

Thanks for reading, and have a great week!

Paul Goodchild
Shield Security for WordPress

Hello dear reader!

If you want to level-up your WordPress security with ShieldPRO, click to get started today. (risk-free, with our no-quibble 14-day satisfaction promise!)

You'll get all PRO features, including AI Malware Scanning, WP Config File Protection, Plugin and Theme File Guard, import/export, exclusive customer support, and much, much more.

We'd be honoured to have you as a member, and look forward to serving you during your journey towards powerful, WordPress security.

Try ShieldPRO Today →

ShieldPRO Testimonials

@jimmmy

Simple to use, kept me safe so far

I needed a firewall to add to the basic securi set up i had in place. Simple firewall has a bunch of awesome features and it’s simple too figure out.

@christopheran

Fast, Easy, Simple, Updated Regularly

I have seven wordpress sites and use WP Simple Firewall on all of them. I’ve used other firewall plugins in the past. Most were a real pain – they were difficult to update, made site updates difficult, were complicated to set up and hard to uninstall. Some were expensive, and…

@indigobleu

It's the best and tried the rest

I tried most popular security products for my WordPress site and have had one problem after another. Simple Firewall worked the best, easy to configure even for a novice and didn’t take over unnecessary functions like the others did. You also don’t need a separate comment program when you have…

@portmaconline

Great free security plugin

As a marketing agency manager I have tried most security plugins for WordPress, some suck, some will protect you from basic hacking but not pros, some work well but are a pain in the a$$ to maintain. Then there is Shield! You install it, activate it, run through the simple…

Comments (2)

Lana

September 26, 2024 10:10 am

Thank you for sharing our event 🙂

Jelena M.

September 26, 2024 12:21 pm

You’re very welcome, Lana. We’re glad to help spread the word.

Your dedication to supporting the WordPress community—something we all care about—is truly impressive.

Warm regards from the Shield Security crew.🙂

ESSENTIAL WORDPRESS SECURITY NEWS

Get ShieldNOTES, our excellent weekly WordPress security newsletter!

ShieldNOTES Ep#33: Recent Vulnerabilities, Upcoming WP Agency Summit & Important Update From Shield’s Team

#1 – Vulnerable: MC4WP: Mailchimp Plugin

#3 – Vulnerable: WCFM Marketplace Plugin

#4 – WordPress Agency Summit 2024