WordPress Plugin Woes: 7,966 Vulnerabilities Unveiled – Are Your Plugins Safe?
WordPress vulnerabilities hit a staggering 7,966 last year, with plugins being the usual suspects in 96% of cases. Despite the high numbers, most vulnerabilities were as threatening as a wet noodle. However, Patchstack warns of abandoned plugins—like leaving your front door open and hoping raccoons don’t move in.
Hot Take:
WordPress plugins are the new wild west of cybersecurity! With thousands of new vulnerabilities popping up like daisies, it’s time for developers to cowboy up and patch those holes before the internet turns into a spaghetti western of data breaches. Yeehaw!
Key Points:
- 7,966 new vulnerabilities were found in the WordPress ecosystem last year, primarily impacting plugins and themes.
- Only seven vulnerabilities were found in the WordPress core, with plugins hosting the majority (96%).
- Most vulnerabilities are unlikely to be exploited, with 69.6% considered low risk.
- Almost half of the flaws were cross-site scripting issues, followed by broken access control and cross-site request forgery.
- 33% of the vulnerabilities were not patched before being publicly disclosed, many in abandoned plugins.
Already a member? Log in here