Three Plugins with Same Bug Put 84K WordPress Sites at Risk

🗓️ 14 Jan 2022 14:07:36Reported by Elizabeth MontalbanoType

Three Plugins with Same Bug Put 84K WordPress Sites at Risk Researchers discovered three WordPress plug-ins with the same vulnerability, allowing an attacker to take over vulnerable sites by updating arbitrary options. Exploiting the flaw requires action from the site administrator

Source	Link
threatpost	www.threatpost.com/wordpress-plugin-bug-wipe-sites/175826/
wordpress	www.wordpress.org/plugins/easy-login-woocommerce
threatpost	www.threatpost.com/frontend-file-manager-wordpress-bugs/167687/
wordfence	www.wordfence.com/blog/2022/01/84000-wordpress-sites-affected-by-three-plugins-with-the-same-vulnerability/
xootix	www.xootix.com/
wordpress	www.wordpress.org/plugins/side-cart-woocommerce/
wordpress	www.wordpress.org/plugins/waitlist-woocommerce/
riskbasedsecurity	www.riskbasedsecurity.com/2022/1/11/wordpress-vulnerabilities-more-than-doubled-in-2021/
threatpost	www.threatpost.com/webinars/password-reset-claiming-control-of-credentials-to-stop-attacks/
threatpost	www.threatpost.com/webinars/password-reset-claiming-control-of-credentials-to-stop-attacks/

14 Jan 2022 14:07Current

9.7High risk

Vulners AI Score9.7