If your website is Watch Watery Boarding House Onlinepowered by the WordPress page-builder Elementor, double-check if you're using this popular plugin. Because, if you are, hackers can easily stage a complete takeover of your website thanks to a newly discovered security flaw.
Security researchers at Patchstack have released a new reportabout a concerning cybersecurity issue related to the WordPress plugin Essential Addons for Elementor. The plugin provides users with an assortment of pre-built WordPress blocks and templates for use when creating or updating their website.
"This plugin suffers from an unauthenticated privilege escalation vulnerability and allows any unauthenticated user to escalate their privilege to that of any user on the WordPress site," writes Patchstack in its report.
Basically, malicious actors can take advantage of this to reset the password of any user, including the administrator's account. If that latter account's password is reset, a hacker could basically have access to the entire website – backend and all – and take control of the site from its rightful owner. If a targeted website stores user information, this bad actor would have access to and control of that as well.
"This vulnerability occurs because this password reset function does not validate a password reset key and instead directly changes the password of the given user," explains Patchstack.
The plugin vulnerability has since been patched and Essential Addons for Elementor users are being urged to update to version 5.7.2. All versions of the plugin prior, going back to version 5.4.0, are affected by the vulnerability. So, be sure to update the plugin!
More than 43 percentof all of the websites on the internet use WordPress. Elementor is a popular website builder for WordPress-powered sites. More than 12 millionWordPress-sites utilize Elementor. According to the WordPress Plugin Directory, more than 1 millionactive websites have the Essential Addons for Elementor installed.
Topics Cybersecurity
Best Max streaming deal: Save 20% on annual subscriptions
Zoom Escaper makes it easy to sabotage that unbearable Zoom meeting
Chrissy Teigen accidentally showed her nipple on Snapchat and handled it like a champ
Elon Musk made a song about NFTs, and he's selling it as an NFT
Q&A with tendercare founder and CEO Shauna Sweeney
Zoom Escaper makes it easy to sabotage that unbearable Zoom meeting
A woodpecker is smashing car mirrors all around Georgia community
Cheech the smiling dog wants you to adopt him
New MIT report reveals energy costs of AI tools like ChatGPT
Katy Perry's wedding crash resulted in cute pics and awesome dancing
NYT Strands hints, answers for May 1
Kellogg's apologises for 'racist' cereal box cartoon
How some indigenous communities have built their own internet
Phoenix Suns' Eric Bledsoe inspires hair salon meme after bitter tweet
Inside the Murky Process of Getting Games on Steam
Maybe don't get a photo with your friends inside a crocodile trap
A woodpecker is smashing car mirrors all around Georgia community
'Avatar' passes 'Avengers: Endgame' for box office record
U.N. aims to make carbon emissions cost money at COP 25 climate talks
OnePlus just revealed the 9 Pro early and Apple might be the reason
Here's how to file an SEC complaint against a stockBumble launches LinkedInBumble launches LinkedInRemastered 'Mass Effect' does something about those damn elevators'Passing' is a riveting exploration of identity: Movie reviewNetflix's 'Spycraft' takes an uncomplicated look at complex issuesHow to learn calligraphy online12 best TV and movie recipes from 'Binging with Babish'Drinking in a canoe is illegal in Canada, but that could soon changeFrontline nurse wins contest to watch movies in a remote lighthouse by herselfThe 13 best tweets of the week, including GameStop jokes, LMFAO, and ThanosIf you didn't know, Puerto Rico is surrounded by ocean water, according to TrumpTom Price criticized 'reckless government spending'You'll soon be able to unlock your iPhone while wearing a face maskUber is definitely not happy with Travis Kalanick's board appointmentsOnline exhibits for you to learn more about Black historyThe internet tricked me into believing I can multitaskBumble launches LinkedInOnline exhibits for you to learn more about Black historyLeaked NBA memo instructs that players, coaches must stand during the national anthem Facebook, Instagram now allow praise for Kyle Rittenhouse Devin Nunes retires from Congress and will be CEO of Trump's new social media company Polestar’s next EV will be a smaller SUV Maya Rudolph and Andy Samberg were born to host Peacock's 'Baking It' How to cope with Omicron anxiety when it affects your mental health How to open different iPhone camera modes fast or by default Parents track kids with Life360 for free. Life360 then sells their data. All the very weird stuff you need to start an 'oddly satisfying' Instagram account Financial topics dominate Google's top trending searches of 2021 'Halo Infinite' review: The best Halo in years even if it's not finished yet 'Wolf' should've been a short film: Review Tesla has launched an electric ATV for kids The biggest EV reveals of 2021 from Tesla, Ford, and more Not everyone's celebrating the royal wedding. Some want the monarchy abolished. Steven Spielberg's 'West Side Story' is a rapturous remake of a Broadway classic Please enjoy this collection of Photoshopped birds without wings Student artist installs 'cry closet' at university library Sneaky guide dog leads owner to his favourite store whenever they're out shopping NASA's deep space satellite captures the shadow of an eclipse on Earth What to do if your iPhone gets wet
1.9136s , 10108.7265625 kb
Copyright © 2025 Powered by 【Watch Watery Boarding House Online】,New Knowledge Information Network