WordPress plugins are the weak link. If anything is going to go wrong with WordPress it’s cause is going to be a plugin. If you don’t know, plugins are what gives WP it functionality.

Plugins are a ‘Wild West” world. They come and go, may have weak code, have not been updated in eons, you get the picture.

When checking the dashboards one morning we saw this client had received a vulnerability warning for a plugin that could allow a SQL injection. The consequences could have been costly. Web Guy caught the error got a vendor patch and rescanned the site.

Web Guy saved this client hundreds. If that plugin had failed and crashed the site it would have cost hundreds to troubleshoot and restore not to mention the damage to their business.

Another very appreciative community member

Actual warning

Simple History Vulnerability
Category:PLUGIN
Versions-Affected:<= 3.3.1
Type:Injection
Severity:LOW
Fixed-in:3.4.0
Description:ed32.dll discovered and reported this CSV Injection vulnerability in WordPress Simple History Plugin. This could allow a malicious actor to craft malicious formulas to then exploit vulnerabilities in the spreadsheet software or to execute commands to gain access to the victim’;s PC. This vulnerability has been fixed in version 3.4.0.

#wordPress #wordpressbackups #wordpresssecurity