A static code analysis of 12 commonly used WordPress e-commerce plug-ins found that at least four of them contained one or more high-risk vulnerabilities.One of the four offending plug-ins was found with three flaws, while the other three possessed just one, according to application security testing company Checkmarx, which conducted the analysis during the first half of November.Altogether, the problems consisted of three reflected cross-site scripting flaws, a SQL injection and a second order SQL injection vulnerability, and a file manipulation vulnerability. “Of the vulnerabilities that we have detected so far, if they were exploited, the users of over 135,000 websites could find their personal data threatened by malicious parties or cybercriminals,” Checkmarx stated in a research report posted on Tuesday.Checkmarx was unable to comment on whether or not there are currently any patched versions of the impacted plug-ins. Additional details on the vulnerabilities will be revealed only after the affected plug-in distributors have had an opportunity to respond to the disclosure, the company noted.
Network Security, Vulnerability Management
Analysis finds high-risk vulnerabilities in four popular WordPress e-commerce plug-ins
An In-Depth Guide to Network Security
Get essential knowledge and practical strategies to fortify your network security.
Bradley Barth
As director of multimedia content strategy at CyberRisk Alliance, Bradley Barth develops content for online conferences, webcasts, podcasts video/multimedia projects — often serving as moderator or host. For nearly six years, he wrote and reported for SC Media as deputy editor and, before that, senior reporter. He was previously a program executive with the tech-focused PR firm Voxus. Past journalistic experience includes stints as business editor at Executive Technology, a staff writer at New York Sportscene and a freelance journalist covering travel and entertainment. In his spare time, Bradley also writes screenplays.
Related Events
Get daily email updates
SC Media's daily must-read of the most current and pressing daily news
You can skip this ad in 5 seconds