WordPress plugins can be a gateway to hacking websites

Hackers are said to be exploiting vulnerabilities in more than 10 plugins to gain access to the accounts of WordPress-based website administrators. This is an escalation of an attack reported in July, in which attackers were hijacking sites to display ads, plant malware, and download malicious apps. Now the same group of hackers has full control over the vulnerable sites using similar tactics, according to ZDNet reports. Starting on August 20, the hacker group was able to modify the malicious code planted on the sites that were hacked.

Among the most important plugins that include vulnerabilities we find: Coming Soon Page & Maintenance Mode Yellow Pencil Visual CSS Style Editor Blog Designer Bold Page Builder Live Chat with Facebook Messenger Yuzo Related Posts WP Live Chat Support Form Lightbox Hybrid Composer All former NicDark plugins The hacker group targets old vulnerabilities, which means that sites that keep their plugins updated are less vulnerable to recent attacks. Since cleaning up infected WordPress sites can be a difficult task, ZDNet advises non-technical users to seek help from experienced professionals.

Website owners can avoid these problems by working to update the plugins they use and even the version of WordPress that receives many security updates. Some updates may sometimes bring some technical problems due to conflict with other features or problems from developers. Therefore, before installing new updates, you can wait for some time to avoid disrupting your site, but avoid delaying the move to install updates because this exposes your site to danger.