{"id":1575,"date":"2020-04-28T19:08:36","date_gmt":"2020-04-28T19:08:36","guid":{"rendered":"https:\/\/cisobyte.com\/?p=1575"},"modified":"2020-04-29T22:08:15","modified_gmt":"2020-04-29T22:08:15","slug":"patching-wordpress-plugin-vulnerabilities-or-how-i-learned-to-love-update-all","status":"publish","type":"post","link":"https:\/\/cisobyte.com\/index.php\/2020\/04\/28\/patching-wordpress-plugin-vulnerabilities-or-how-i-learned-to-love-update-all\/","title":{"rendered":"Patching WordPress Plugin Vulnerabilities; or, how I learned to love &#8220;update all&#8221;"},"content":{"rendered":"<h4 style=\"text-align: left;\"><strong>CISObyte&nbsp; &nbsp; 04-28-2020<\/strong><\/h4>\n<p><\/p>\n<h4>A cross-site request forgery attack is used to send malicious requests from a valid user to an application.&nbsp;<\/h4>\n<h2>Vulnerability in <strong>Real-Time Find and Replace<\/strong> WordPress plugin.<\/h2>\n<p>&#8220;Real-Time Find and Replace provides functionality to dynamically replace any HTML content on WordPress sites with new content without permanently changing the source content.&#8221; &#8220;This flaw could allow any user to inject malicious Javascript anywhere on a site if they could trick a site\u2019s administrator into performing an action, like clicking on a link in a comment or email.&#8221; It has been patched in version 4.0.2. While CISObyte does not use this particular plugin, we&#8217;re keenly aware, and keeping the ones we do use updated daily.<\/p>\n<ul>\n<li>Vulnerability Management<\/li>\n<li>WordPress<\/li>\n<li>Plugin<\/li>\n<li>Patch Management<\/li>\n<\/ul>\n<div class=\"vlp-link-container vlp-template-default \">\n\t<a href=\"https:\/\/www.wordfence.com\/blog\/2020\/04\/high-severity-vulnerability-patched-in-real-time-find-and-replace-plugin\/\" class=\"vlp-link\" title=\"Wordfence - High Severity Vulnerability Patched in Real-Time Find and Replace Plugin\" rel=\"nofollow\" target=\"_blank\"><\/a>\t\t<div class=\"vlp-link-image-container\">\n\t\t<div class=\"vlp-link-image\">\n\t\t\t<img decoding=\"async\" src=\"https:\/\/www.wordfence.com\/wp-content\/uploads\/2020\/04\/Artboard-1-13.png\" style=\"max-width: 600px; max-height: 600px\" \/>\t\t<\/div>\n\t<\/div>\n\t\t<div class=\"vlp-link-text-container\">\n\t\t\t\t<div class=\"vlp-link-title\">\n\t\t\tWordfence - High Severity Vulnerability Patched in Real-Time Find and Replace Plugin\t\t<\/div>\n\t\t\t\t\t\t<div class=\"vlp-link-summary\">\n\t\t\tOn April 22, 2020, our Threat Intelligence team discovered a vulnerability in Real-Time Find and Replace, a WordPress plugin installed on over 100,000 sites. This flaw could allow any user to inject malicious Javascript anywhere on a site if they could trick a site\u2019s administrator into performing an\u2026\t\t<\/div>\n\t\t\t<\/div>\n<\/div>\n\n\n\n<p><\/p>\n","protected":false},"excerpt":{"rendered":"<p>A cross-site request forgery attack is used to send malicious requests from a valid user to an application.\u00a0<br \/>\nVulnerability in Real-Time Find and Replace Wordpress plugin.<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"site-sidebar-layout":"default","site-content-layout":"default","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","ast-disable-related-posts":"","theme-transparent-header-meta":"default","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"categories":[22,24],"tags":[28,26,13,25],"class_list":["post-1575","post","type-post","status-publish","format-standard","hentry","category-vulnerability-management","category-wordpress-plugin","tag-patch-management","tag-plugin","tag-vulnerability-management","tag-wordpress"],"_links":{"self":[{"href":"https:\/\/cisobyte.com\/index.php\/wp-json\/wp\/v2\/posts\/1575","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cisobyte.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cisobyte.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cisobyte.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/cisobyte.com\/index.php\/wp-json\/wp\/v2\/comments?post=1575"}],"version-history":[{"count":3,"href":"https:\/\/cisobyte.com\/index.php\/wp-json\/wp\/v2\/posts\/1575\/revisions"}],"predecessor-version":[{"id":1620,"href":"https:\/\/cisobyte.com\/index.php\/wp-json\/wp\/v2\/posts\/1575\/revisions\/1620"}],"wp:attachment":[{"href":"https:\/\/cisobyte.com\/index.php\/wp-json\/wp\/v2\/media?parent=1575"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cisobyte.com\/index.php\/wp-json\/wp\/v2\/categories?post=1575"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cisobyte.com\/index.php\/wp-json\/wp\/v2\/tags?post=1575"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}