WordPress users should exercise caution as The Beautiful Cookie Consent Banner plugin continues to face XSS attacks. The flaw on WordPress websites using outdated plugin versions enables unauthenticated attackers to create rogue admin accounts. Despite fixing the security hole in January with the introduction of version 2.10.2, attackers continue to carry out attacks. Defiant, a WordPress security firm, reports that they have actively stopped over 1.5 million attacks since May 23, 2023. The threat actor behind this effort used a poorly constructed exploit that, even if it were to target a WordPress site using a vulnerable plugin version, would probably not execute a payload. The patched versions of the plugin now have the ability to update themselves automatically if the website becomes the target of these attacks, ensuring that the security remains intact. Threat actors also started searching the internet last week for WordPress websites using outdated or insecure plugins like the Advanced Custom Fields for WordPress and Essential Addons for Elementor. The operations got underway following the publication of proof-of-concept (PoC) flaws that, after changing admin passwords and obtaining privileged access, allowed unauthenticated attackers to take over websites.

How to keep your website safe?

 

• The following advice will help you keep your WordPress website safe: Update your plugins regularly. This is the most crucial thing you can do to safeguard your website from attacks. WordPress plugins are often there to address security flaws.
• It is important to update your website as it will help the website be safe from cyber threat.
• Make use of a security plugin. An effective security plugin can aid in thwarting attacks and obstructing harmful communications. Choose a security plugin that has a solid reputation and is frequently updated from among the various options accessible.
• Exercise caution while installing plugins. Install plugins only from reliable sources. It’s crucial to be cautious while installing plugins because many are harmful.
• Make use of secure passwords and update them frequently. The first line of defence against an assault is a password. Use secure passwords, and change them often. Regularly backup your website.
• You can help keep your WordPress website secure by adhering to these recommendations.

WordPress users should exercise caution as The Beautiful Cookie Consent Banner plugin continues to face XSS attacks. The flaw on WordPress websites using outdated plugin versions enables unauthenticated attackers to create rogue admin accounts. Despite fixing the security hole in January with the introduction of version 2.10.2, attackers continue to carry out attacks. Defiant, a WordPress security firm, reports that they have actively stopped over 1.5 million attacks since May 23, 2023. The threat actor behind this effort used a poorly constructed exploit that, even if it were to target a WordPress site using a vulnerable plugin version, would probably not execute a payload. The patched versions of the plugin now have the ability to update themselves automatically if the website becomes the target of these attacks, ensuring that the security remains intact. Threat actors also started searching the internet last week for WordPress websites using outdated or insecure plugins like the Advanced Custom Fields for WordPress and Essential Addons for Elementor. The operations got underway following the publication of proof-of-concept (PoC) flaws that, after changing admin passwords and obtaining privileged access, allowed unauthenticated attackers to take over websites.