Ukraine-Russia War: Another reason to keep WordPress sites updated

https://securityaffairs.co/wordpress/128613/cyber-warfare-2/ukrainian-wordpress-sites-attacks.html

WordPress backup/cloning pluggin creator Updraft warns that update is needed.

WordPress backup plugin maker Updraft says “You should update”…

UpdraftPlus security release – 1.22.3 / 2.22.3 – please upgrade

Popular WordPress plugin has RCE vulnerability allows unauthenticated attackers to perform a local file inclusion attack. Exposes 600,000 sites.

https://www.bleepingcomputer.com/news/security/600k-wordpress-sites-impacted-by-critical-plugin-rce-vulnerability/

As if today was not bad enough, 1.6 million WordPress sites under attack from 16k sources.

1.6 Million WordPress Sites Hit With 13.7 Million Attacks In 36 Hours From 16,000 IPs

Data breach at GoDaddy impacts resellers of WordPress hosting services

https://www.bleepingcomputer.com/news/security/godaddy-data-breach-hits-wordpress-hosting-services-resellers/

WordPress plugin vulnerability allows subscribers to wipe sites

https://www.bleepingcomputer.com/news/security/brutal-wordpress-plugin-bug-allows-subscribers-to-wipe-sites/

Flaws in WordPress plugin can lead to arbitrary code execution

https://securityaffairs.co/wordpress/120724/breaking-news/wordpress-download-manager-plugin-flaws.html

WordPress plugin Fancy Product Designer is under active attack from zero-day vulnerability. Update now to 4.6.9.

Critical 0-day in Fancy Product Designer Under Active Attack