WordPress Vulnerability Report – August 3, 2022

Vulnerable plugins and themes are the #1 reason WordPress websites get hacked. The weekly WordPress Vulnerability Report powered by WPScan covers recent WordPress plugin, theme, and core vulnerabilities and what to do if you run one of the vulnerable plugins or themes on your website.

Contents

WordPress Core Vulnerabilities WordPress Plugin Vulnerabilities Advanced Custom Fields Better Search and Replace Duplicator Download Manager Social Chat Social Slider Feed Feed Them Social Simple Banner WP phpMyAdmin Simple Job Board Product Slider for WooCommerce Automations By Autonami Directorist WP Coder WordPress Team Members Showcase WP Sticky Button Simple SEO Lana Downloads Manager Automatic pages for Privacy Policy, Terms, About, Contact us Student Result or Employee Database Add Hierarchy (parent) to post Debug Bar Remove tabs and fields from WooCommerce Ninja Job Board Profile & Dashboard fields Breadcrumbs Shortcode External url as post Featured Image Require & Limit Categories, Tags, Featured Image and taxonomies Download buttons for Youtube videos Redirect By Cookie Images Asynchronous Load Comment Fields [Modify/Disable/Remove]LinkWorth Plugin WPQA Highlight Searched Terms in Results API info for Plugins & Themes from WP.ORG Add Custom Post Type into Post Query All custom fields & groups Rezgo Online Booking Built-in Widgets Query extend Find Slow Functions & Actions & Filters & Hooks (Debug Bar)WordPress Plugin Vulnerabilities – No Known Fix Coming Soon – Under Construction Yotpo Reviews for WooCommerce Auto-hyperlink URLs Floating Div Enable SVG, WebP & ICO Upload WPGraphQL WooCommerce Transposh WordPress Translation WP Edit Menu BxSlider WP VR Calendar GS Testimonial Slider WordPress Theme Vulnerabilities Ask Me < 6.8.4 – CSRF in Edit Profile Sneak Peek: Biometric Logins + Passkeys are Coming See a live demo on August 10, 2022 @ 1:00 p.m. (CT)Never worry about running a vulnerable plugin or theme again.Scans Your Website Twice a Day for Vulnerabilities Automatically Updates if a Security Fix is Available Emails You if Site Scan Detects a Vulnerability The Best WordPress Security Plugin to Secure & Protect WordPress Sites

Each vulnerability will have a severity rating of low, medium, high, or critical. Responsible disclosure and reporting of vulnerabilities is an integral part of keeping the WordPress community safe. Please share this post with your friends to help get the word out and make WordPress safer for everyone!

Get the weekly WordPress Vulnerability Report delivered to your inbox each Wednesday.

WordPress Core Vulnerabilities

WordPress 6.0.1 was released on July 12, 2022, as a short-cycle maintenance release with 31 bug fixes. Because this is a core update, be sure to update to WordPress 6.0.1 as soon as possible.

No new WordPress core vulnerabilities were disclosed this week.

WordPress Plugin Vulnerabilities

In this section, the latest WordPress plugin vulnerabilities have been disclosed. Each plugin listing includes the type of vulnerability, the active installations, the version number if patched, and the severity rating.

Advanced Custom Fields

Plugin: Advanced Custom Fields
Installations: 2,000,000+
Vulnerability: Unauthenticated File Upload
Patched in Version: 5.12.3
Severity Score: Medium

Better Search and Replace

Plugin: Better Search Replace
Installations: 1,000,000+
Vulnerability: Admin+ SQLi
Patched in Version: 1.4.1
Severity Score: Medium

Duplicator

Plugin: Duplicator – WordPress Migration Plugin
Installations: 1,000,000+
Vulnerability: Unauthenticated System Information Disclosure
Patched in Version: 1.4.7
Severity Score: Medium

Download Manager

Plugin: Download Manager
Installations: 100,000+
Vulnerability: Bypass IP Address Blocking Restriction
Patched in Version: 3.2.50
Severity Score: Medium

Plugin: WP Social Chat – Click To Chat App
Installations: 100,000+
Vulnerability: Admin+ Stored Cross-Site Scripting
Patched in Version: 6.0.5
Severity Score: Low

Plugin: Social Slider Feed
Installations: 90,000+
Vulnerability: Subscriber+ Stored XSS via Feeds; Reflected Cross-Site Scripting; Subscriber+ Arbitrary API Key Update to Stored XSS; Subscriber+ Arbitrary Feed Deletion
Patched in Version: 2.0.5
Severity Score: High

Plugin: Feed Them Social – for Twitter feed, Youtube and more
Installations: 70,000+
Vulnerability: Reflected Cross-Site Scripting
Patched in Version: 3.0.1
Severity Score: Medium

Plugin: Simple Banner
Installations: 50,000+
Vulnerability: Admin+ Stored Cross Site Scripting
Patched in Version: 2.12.0
Severity Score: Low

WP phpMyAdmin

Plugin: WP phpMyAdmin
Installations: 40,000+
Vulnerability: Admin+ Stored Cross-Site Scripting; Reflected Cross-Site Scripting
Patched in Version: 5.2.0.4
Severity Score: Low

Simple Job Board

Plugin: Simple Job Board
Installations: 20,000+
Vulnerability: Resume Disclosure via Directory Listing
Patched in Version: 2.10.0
Severity Score: Medium

Product Slider for WooCommerce

Plugin: Product Slider for WooCommerce
Installations: 20,000+
Vulnerability: Subscriber+ Arbitrary Options Deletion
Patched in Version: 2.5.7
Severity Score: High

Automations By Autonami

Plugin: Abandoned Cart Recovery for WooCommerce, Follow Up Emails, Newsletter Builder & Marketing Automation By Autonami
Installations: 10,000+
Vulnerability: Subscriber+ Automation Creation
Patched in Version: 2.1.2
Severity Score: Medium

Directorist

Plugin: Directorist – WordPress Business Directory Plugin with Classified Ads Listings
Installations: 10,000+
Vulnerability: Subscriber+ Arbitrary E-mail Sending
Patched in Version: 7.3.0
Severity Score: Medium

WP Coder

Plugin: WP Coder – add custom html, css and js code
Installations: 10,000+
Vulnerability: Code Deletion via CSRF
Patched in Version: 2.5.3
Severity Score: Medium

WordPress Team Members Showcase

Plugin: Team – WordPress Team Members Showcase Plugin
Installations: 10,000+
Vulnerability: Subscriber+ Arbitrary File Read and Deletion
Patched in Version: 4.1.2
Severity Score: High

WP Sticky Button

Plugin: WP Sticky Button – Click to Chat
Installations: 10,000+
Vulnerability: Unauthenticated Arbitrary Settings Update to Stored XSS
Patched in Version: 1.4.1
Severity Score: High

Simple SEO

Plugin: Simple SEO
Installations: 6,000+
Vulnerability: Contributor+ Stored Cross-Site Scripting
Patched in Version: 1.7.92
Severity Score: Medium

Lana Downloads Manager

Plugin: Lana Downloads Manager
Installations: 2,000+
Vulnerability: Contributor+ Arbitrary File Download
Patched in Version: 1.8.0
Severity Score: High

Automatic pages for Privacy Policy, Terms, About, Contact us

Plugin: Automatic pages for Privacy Policy, Terms, About, Contact us
Installations: 1,000+
Vulnerability: Reflected Cross-Site Scripting
Patched in Version: 1.42
Severity Score: Medium

Student Result or Employee Database

Plugin: Student Result or Employee Database
Installations: 1,000+
Vulnerability: Stored Cross Site Scripting via CSRF; Unauthorised REST Calls
Patched in Version: 1.7.5
Severity Score: Medium

Add Hierarchy (parent) to post

Plugin: Add Hierarchy (parent) to post
Installations: 700+
Vulnerability: Reflected Cross-Site Scripting
Patched in Version: 3.13
Severity Score: Medium

Debug Bar

Plugin: Debug Bar – Enable WP_DEBUG from admin dashboard
Installations: 500+
Vulnerability: Reflected Cross-Site Scripting
Patched in Version: 1.86
Severity Score: Medium

Remove tabs and fields from WooCommerce

Plugin: Remove tabs and fields from WooCommerce
Installations: 400+
Vulnerability: Reflected Cross-Site Scripting
Patched in Version: 1.68
Severity Score: Medium

Ninja Job Board

Plugin: Ninja Job Board – Ultimate WordPress Job Board Plugin
Installations: 200+
Vulnerability: Resume Disclosure via Directory Listing
Patched in Version: 1.3.3
Severity Score: Medium

Profile & Dashboard fields

Plugin: Profile & Dashboard fields [Modify/Disable/Remove]
Installations: 200+
Vulnerability: Reflected Cross-Site Scripting
Patched in Version: 1.04
Severity Score: Medium

Breadcrumbs Shortcode

Plugin: Breadcrumbs Shortcode
Installations: 200+
Vulnerability: Reflected Cross-Site Scripting
Patched in Version: 1.45
Severity Score: Medium

External url as post Featured Image

Plugin: External url as post Featured Image (thumbnail)
Installations: 100+
Vulnerability: Reflected Cross-Site Scripting
Patched in Version: 2.03
Severity Score: Medium

Require & Limit Categories, Tags, Featured Image and taxonomies

Plugin: Require & Limit Categories, Tags, Featured Image and taxonomies
Installations: 30+
Vulnerability: Reflected Cross-Site Scripting
Patched in Version: 1.27
Severity Score: Medium

Download buttons for Youtube videos

Plugin: Download buttons for Youtube videos
Installations: 20+
Vulnerability: Reflected Cross-Site Scripting
Patched in Version: 1.04
Severity Score: Medium

Plugin: Redirect By Cookie
Installations: 20+
Vulnerability: Reflected Cross-Site Scripting
Patched in Version: 1.07
Severity Score: Medium

Images Asynchronous Load

Plugin: Images Asynchronous Load
Installations: 10+
Vulnerability: Reflected Cross-Site Scripting
Patched in Version: 1.06
Severity Score: Medium

Comment Fields [Modify/Disable/Remove]

Plugin: Comment Fields [Modify/Disable/Remove]
Vulnerability: Reflected Cross-Site Scripting
Patched in Version: 1.04
Severity Score: Medium

LinkWorth Plugin

Plugin: LinkWorth Plugin
Vulnerability: Arbitrary Setting Update via CSRF
Patched in Version: 3.3.4
Severity Score: Medium

WPQA

Plugin: WPQA Builder
Vulnerability: Subscriber+ Private Message Disclosure via IDOR
Patched in Version: 5.7
Severity Score: Medium

Highlight Searched Terms in Results

Plugin: Highlight Searched Terms in Results
Vulnerability: Reflected Cross-Site Scripting
Patched in Version: 1.04
Severity Score: Medium

API info for Plugins & Themes from WP.ORG

Plugin: API info for Plugins & Themes from WP.ORG
Vulnerability: Reflected Cross-Site Scripting
Patched in Version: 1.05
Severity Score: Medium

Add Custom Post Type into Post Query

Plugin: Add Custom Post Type into Post Query
Vulnerability: Reflected Cross-Site Scripting
Patched in Version: 1.04
Severity Score: Medium

All custom fields & groups

Plugin: All custom fields & groups
Vulnerability: Reflected Cross-Site Scripting
Patched in Version: 1.05
Severity Score: Medium

Rezgo Online Booking

Plugin: Rezgo Online Booking
Vulnerability: Reflected Cross-Site-Scripting
Patched in Version: 4.1.8
Severity Score: Medium

Built-in Widgets Query extend

Plugin: Built-in Widgets Query extend (Custom Post Types & more)
Vulnerability: Reflected Cross-Site Scripting
Patched in Version: 1.06
Severity Score: Medium

Find Slow Functions & Actions & Filters & Hooks (Debug Bar)

Plugin: Find Slow Functions & Actions & Filters & Hooks (Debug Bar)
Vulnerability: Reflected Cross-Site Scripting
Patched in Version: 1.41
Severity Score: Medium

WordPress Plugin Vulnerabilities – No Known Fix

This section contains plugin vulnerabilities with no known fix. Until a patch is available, immediately uninstall and delete the plugin.

Coming Soon – Under Construction

Plugin: Coming Soon – Under Construction
Installations: 800+
Vulnerability: Admin+ Stored Cross-Site Scripting
Patched in Version: No Fix
Severity Score: Low

Yotpo Reviews for WooCommerce

Plugin: Yotpo Reviews for WooCommerce (Unofficial)
Vulnerability: Arbitrary Settings Update via CSRF
Patched in Version: No Fix
Severity Score: Medium

Auto-hyperlink URLs

Plugin: Auto-hyperlink URLs
Vulnerability: Tab Nabbing
Patched in Version: No Fix
Severity Score: Medium

Floating Div

Plugin: Floating Div
Vulnerability: Author+ Stored Cross-Site Scripting
Patched in Version: No Fix
Severity Score: Medium

Enable SVG, WebP & ICO Upload

Plugin: Enable SVG, WebP & ICO Upload
Vulnerability: Author+ Arbitrary File Upload; Author+ Stored Cross-Site Scripting
Patched in Version: No Fix
Severity Score: High

WPGraphQL WooCommerce

Plugin: WPGraphQL WooCommerce
Vulnerability: Unauthenticated Coupon Codes Disclosure
Patched in Version: No Fix
Severity Score: Medium

Transposh WordPress Translation

Plugin: Transposh WordPress Translation
Vulnerability: Admin+ SQL Injection; Subscriber+ Unauthorised Calls
Patched in Version: No Fix
Severity Score: Medium

Plugin: WP Edit Menu
Vulnerability: Arbitrary Post Deletion via CSRF
Patched in Version: No Fix
Severity Score: Medium

BxSlider WP

Plugin: BxSlider WP
Vulnerability: Contributor+ Stored Cross-Site Scripting
Patched in Version: No Fix
Severity Score: Medium

VR Calendar

Plugin: VR Calendar
Vulnerability: Reflected Cross-Site Scripting; Admin+ LFI
Patched in Version: No Fix
Severity Score: Medium

GS Testimonial Slider

Plugin: GS Testimonial Slider
Vulnerability: Author+ Stored Cross-Site Scripting
Patched in Version: No Fix
Severity Score: Medium

WordPress Theme Vulnerabilities

In this section, the latest WordPress theme vulnerabilities have been disclosed. Each theme listing includes the type of vulnerability, the active installations, the version number if patched, and the severity rating.

Ask Me < 6.8.4 – CSRF in Edit Profile

Theme: Ask me
Vulnerability: CSRF
Patched in Version: 6.8.4
Severity Score: Medium

Sneak Peek: Biometric Logins + Passkeys are Coming

See a live demo on August 10, 2022 @ 1:00 p.m. (CT)

The easiest and most secure way to log in to your WordPress site is coming! In the next major release, iThemes Security will add biometric logins (like Face ID, Touch ID, and Windows Hello) and passkey technology supported by all major browsers, including Chrome, Firefox, and Safari. Now website admins and end users can have secure logins without the inconvenience of additional two-factor apps, password managers, or complex password requirements.

Powered by the WebAuthn protocol, these login methods provide an innovative passwordless login experience that is the future for securing sensitive information online, including logging in to any WordPress site. As the future of logins for all sites and apps, iThemes Security is the first to bring it to WordPress as the primary login method.

Can’t make the live call? Go ahead and register and we’ll email you the video replay.
See time in your time zone.

Never worry about running a vulnerable plugin or theme again.

As you can see from this report, lots of new WordPress plugin and theme vulnerabilities are disclosed each week. We know it can be difficult to stay on top of every reported vulnerability disclosure, so the iThemes Security Pro plugin makes it easy to make sure your site isn’t running a theme, plugin, or WordPress core version with a known vulnerability.

Scans Your Website Twice a Day for Vulnerabilities

Your website’s plugins, themes, and WordPress core versions are checked against the WPScan Vulnerability Database for the latest vulnerability disclosures.

Automatically Updates if a Security Fix is Available

Paired with Version Management, iThemes Security will automatically update a plugin, theme, or WordPress core version if it has a vulnerability.

Emails You if Site Scan Detects a Vulnerability

You can receive an email report if your site is running vulnerable versions of a plugin, theme, or WordPress core. Customize the email addresses that receive scan results.

The Best WordPress Security Plugin to Secure & Protect WordPress Sites

WordPress currently powers over 40% of all websites, so it has become an easy target for hackers with malicious intent. The iThemes Security Pro plugin takes the guesswork out of WordPress security to make it easy to secure & protect your WordPress website. It’s like having a full-time security expert on staff who constantly monitors and protects your WordPress site for you.

Save 40% Off iThemes Security Pro

The post WordPress Vulnerability Report – August 3, 2022 appeared first on iThemes.