Information about “WP Toolkit found new vulnerabilities”

As a customer of Hosting.NL you have access to the Plesk control panel and within this control panel you have access to the WordPress toolkit. This toolkit helps with the daily management of WordPress websites and can provide support to keep WordPress websites secure.

One of the ways that the WordPress toolkit helps keep WordPress websites secure is by linking to external ‘vulnerability databases’. Such a ‘vulnerability database’ is an external collection of known vulnerabilities, in this case for WordPress. If a WordPress website contains a known vulnerability, the website owner is notified about it.

A new version of the WordPress toolkit was released on March 27, and this new version added a new collection of known vulnerabilities, the WordFence Vulnerability database.

WordFence’s newly added collection of known vulnerabilities contains a lot of information about old vulnerabilities that have not been reported on in the past. As a result, many customers are now receiving reporting on these (very old) vulnerabilities.

Some vulnerabilities are currently unresolved, such as this open vulnerability from 2012.

Updates or Security Measures are available for other vulnerabilities. It is important to install the available Updates and/or apply the Security Measures. To do so, follow the instructions in the email and in Plesk.