{"id":168640,"date":"2025-05-05T14:20:16","date_gmt":"2025-05-05T13:20:16","guid":{"rendered":"https:\/\/getshieldsecurity.com\/?p=168640"},"modified":"2025-05-05T14:20:16","modified_gmt":"2025-05-05T13:20:16","slug":"shieldnotes-64","status":"publish","type":"post","link":"https:\/\/getshieldsecurity.com\/blog\/shieldnotes-64\/","title":{"rendered":"Stay Alert: Latest Plugin Risks and WordPress Pingbacks Security"},"content":{"rendered":"\n

SureTriggers is back to the high-risk radar after a quiet week, with other plugins on the horizon. For those dealing with disabling WordPress pingbacks, don\u2019t miss our blog for the full guide.<\/p>\n\n\n\n

#1 – Security Risks in Popular Plugins<\/h2>\n\n\n\n

Top plugins, top risks\u2014make sure you\u2019re using the latest version.<\/p>\n\n\n\n

SureTriggers Plugin<\/a><\/strong>
Privilege Escalation; 9.8<\/strong>\/10; Update to v1.0.83+<\/p>\n\n\n\n

Multilingual CMS Plugin<\/a><\/strong>
XSS; 6.5\/10; Update to v4.7.4+<\/p>\n\n\n\n

SureForms Plugin<\/a><\/strong>
XSS; 5.9\/10; Update to v1.4.4+<\/p>\n\n\n\n

WP Statistics Plugin<\/a><\/strong>
Broken Access Control; 5.4\/10; Update to v14.13.4+<\/p>\n\n\n\n

Editor Comment<\/strong>
It’s worth taking a few minutes each week to perform a sites review<\/a> to catch issues early and wherever possible, use ShieldPRO’s auto-upgrade<\/a> feature for vulnerable plugins.<\/p>\n\n\n\n

#2 – High Security Risks in Less Popular Plugins<\/h2>\n\n\n\n

Fewer users, yet bigger risks\u2014don\u2019t overlook these plugins.<\/p>\n\n\n\n

OTP-less one tap Sign in Plugin<\/a><\/strong>
Privilege Escalation; 9.8<\/strong>\/10; Removed from wp.org; No fix; Remove\/or replace.<\/p>\n\n\n\n

Ads Pro Plugin<\/a><\/strong>
SQL Injection; 9.3<\/strong>\/10; Update to v4.89+<\/p>\n\n\n\n

Ultimate Auction Pro Plugin<\/a><\/strong>
SQL Injection; 9.3<\/strong>\/10; Update to v1.5.3+<\/p>\n\n\n\n

Advance Seat Reservation Management for WooCommerce Plugin<\/a><\/strong>
SQL Injection; 9.3<\/strong>\/10; Update to v3.4+<\/p>\n\n\n\n

Editor Comment<\/strong>
It’s worth taking a few minutes each week to perform a sites review<\/a> to catch issues early and wherever possible, use ShieldPRO’s auto-upgrade<\/a> feature for vulnerable plugins.<\/p>\n\n\n\n

#3 – Our blog: Disable Pingbacks on WordPress<\/h2>\n\n\n\n

Pingbacks might seem easy to turn off, but WordPress doesn\u2019t fully disable them by default. That leaves your site open to attacks. We guide you through a simple shutdown.<\/p>\n\n\n\n

More Info \u2192<\/a><\/p>\n\n\n\n

Thanks for reading, and have a wonderful week!<\/p>\n\n\n\n

Paul Goodchild<\/strong>
Shield Security for WordPress<\/em><\/p>\n","protected":false},"excerpt":{"rendered":"

SureTriggers is back to the high-risk radar after a quiet week, with other plugins on the horizon. For those dealing with disabling WordPress pingbacks, don\u2019t miss our blog for the full guide.<\/p>\n","protected":false},"author":27,"featured_media":163832,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[153,201],"tags":[69],"class_list":["post-168640","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-security-wordpress-solutions","category-shieldnotes","tag-security"],"acf":[],"_links":{"self":[{"href":"https:\/\/getshieldsecurity.com\/wp-json\/wp\/v2\/posts\/168640","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/getshieldsecurity.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/getshieldsecurity.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/getshieldsecurity.com\/wp-json\/wp\/v2\/users\/27"}],"replies":[{"embeddable":true,"href":"https:\/\/getshieldsecurity.com\/wp-json\/wp\/v2\/comments?post=168640"}],"version-history":[{"count":10,"href":"https:\/\/getshieldsecurity.com\/wp-json\/wp\/v2\/posts\/168640\/revisions"}],"predecessor-version":[{"id":168655,"href":"https:\/\/getshieldsecurity.com\/wp-json\/wp\/v2\/posts\/168640\/revisions\/168655"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/getshieldsecurity.com\/wp-json\/wp\/v2\/media\/163832"}],"wp:attachment":[{"href":"https:\/\/getshieldsecurity.com\/wp-json\/wp\/v2\/media?parent=168640"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/getshieldsecurity.com\/wp-json\/wp\/v2\/categories?post=168640"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/getshieldsecurity.com\/wp-json\/wp\/v2\/tags?post=168640"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}