Critical WordPress Plugin Flaw Endangers 200K Sites: Update Now
April 23, 2024![Critical WordPress Plugin Flaw Endangers 200K Sites: Update Now](https://cdn.brief.news/images/stories/584c807745df03f946c5bd8938151cb8ce6eafdfa76930f3de9587814dc45dc9779d2654673aea7809bdc2c382b5f0ed603727ecf769a372c14c8d7880cc3e7e.jpg)
Japan’s CERT has warned of critical vulnerabilities in the Forminator WordPress plugin.
The flaws could allow remote attackers to upload malicious code and access sensitive information.
The specific vulnerability is identified as CVE-2024-28890, impacting over 300,000 sites.
Forminator's latest version, 1.29.3, patches these security issues.
Despite the fix, over 200,000 WordPress sites remain vulnerable.
WPMU DEV has released a patch and users are strongly encouraged to update immediately.
Website admins should regularly update all software components and deactivate unused add-ons for security.
Summary based on 2 sources
Get a daily email with more Tech stories
Sources
![A critical security flaw could affect thousands of WordPress sites](https://cdn.brief.news/images/links/584c807745df03f946c5bd8938151cb8ce6eafdfa76930f3de9587814dc45dc9779d2654673aea7809bdc2c382b5f0ed603727ecf769a372c14c8d7880cc3e7e.jpg)
TechRadar pro • Apr 22, 2024
A critical security flaw could affect thousands of WordPress sites![A flaw in the Forminator plugin impacts hundreds of thousands of WordPress sites](https://cdn.brief.news/images/links/4220b417dbe5be1238f6ae88aca97d2fabfcbde3ddee1acc9bf043e06d58a8f30dde93837da5309106da2f874607c0c1ffb4c63195367a15c8e3a3e99d6a76ee.jpg)
Security Affairs • Apr 22, 2024
A flaw in the Forminator plugin impacts hundreds of thousands of WordPress sites