{"id":42512,"date":"2021-10-14T13:07:32","date_gmt":"2021-10-14T13:07:32","guid":{"rendered":"http:\/\/icloud.pe\/blog\/?guid=c6401c8763fc862487e5acf9149362ea"},"modified":"2021-10-14T13:07:32","modified_gmt":"2021-10-14T13:07:32","slug":"wordpress-plugin-exploit-puts-over-90000-sites-at-risk","status":"publish","type":"post","link":"https:\/\/icloud.pe\/blog\/wordpress-plugin-exploit-puts-over-90000-sites-at-risk\/","title":{"rendered":"WordPress plugin exploit puts over 90,000 sites at risk"},"content":{"rendered":"


\n Bobby Hellard<\/a><\/span>
\n <\/span><\/p>\n

\n
\n
14 Oct, 2021<\/span><\/div>\n<\/p><\/div>\n<\/div>\n

\n<\/a><\/p>\n

\n

Researchers have unearthed a series of vulnerabilities that could have compromised thousands of WordPress<\/a> websites.<\/p>\n

Potentially exploitable bugs were found in the Brizy<\/span>\u00a0Page Builder, a WordPress<\/span> plugin that is installed across more than 90,000 websites, according to security firm Wordfence<\/span>.<\/p>\n

The company’s Threat Intelligence team reported the issues in August and a fix was released shortly afterwards, but it’s likely that a number of installations still remain unpatched<\/a>. If exploited, it could allow attackers to execute “complete site takeover” and add malicious code<\/a> to existing posts.<\/p>\n

The vulnerabilities could also allow for any registered user, including subscribers, to pass as an administrator, where they could modify posts and pages, even if they had already been published on a site.<\/p>\n

The Wordfence’s<\/span> Threat Intelligence team said it stumbled upon the vulnerability while conducting a routine review of the Wordfence<\/span> firewall in July. It said the plugin “did not appear” to be under active attack, but they were led to believe that there was something amiss following\u00a0“unusual traffic”.<\/p>\n

“The unusual traffic led us to discover two new vulnerabilities as well as a previously patched access control vulnerability in the plugin that had been reintroduced,” Wordfence<\/span> wrote in a blog post. “Both new vulnerabilities could take advantage of the access control vulnerability to allow complete site takeover.”<\/p>\n

A patched version of the Brizy<\/span>\u00a0Page Builder plugin, was released on 24 August, just a few days after Wordfence<\/span> disclosed the vulnerability. Wordfence<\/span> “strongly recommends” users update to the latest version of the Brizy<\/span>\u00a0Page Builder (2.3.17) as soon as possible. <\/p>\n<\/p><\/div>\n","protected":false},"excerpt":{"rendered":"

Bobby Hellard<\/p>\n

14 Oct, 2021 <\/p>\n

Researchers have unearthed a series of vulnerabilities that could have compromised thousands of WordPress websites.
\nPotentially exploitable bugs were found in the Brizy\u00a0Page Builder, a WordPres…<\/p>\n","protected":false},"author":403,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[],"tags":[],"class_list":["post-42512","post","type-post","status-publish","format-standard","hentry"],"_links":{"self":[{"href":"https:\/\/icloud.pe\/blog\/wp-json\/wp\/v2\/posts\/42512","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/icloud.pe\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/icloud.pe\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/icloud.pe\/blog\/wp-json\/wp\/v2\/users\/403"}],"replies":[{"embeddable":true,"href":"https:\/\/icloud.pe\/blog\/wp-json\/wp\/v2\/comments?post=42512"}],"version-history":[{"count":1,"href":"https:\/\/icloud.pe\/blog\/wp-json\/wp\/v2\/posts\/42512\/revisions"}],"predecessor-version":[{"id":42513,"href":"https:\/\/icloud.pe\/blog\/wp-json\/wp\/v2\/posts\/42512\/revisions\/42513"}],"wp:attachment":[{"href":"https:\/\/icloud.pe\/blog\/wp-json\/wp\/v2\/media?parent=42512"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/icloud.pe\/blog\/wp-json\/wp\/v2\/categories?post=42512"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/icloud.pe\/blog\/wp-json\/wp\/v2\/tags?post=42512"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}