Plugins
12 articles tagged Plugins, newest first.
Avada Builder 3.15.4 Patches an Unauthenticated File Deletion Flaw (CVE-2026-8713)
Avada Builder 3.15.4 fixes a critical unauthenticated file deletion flaw (CVE-2026-8713, CVSS 9.1) that can delete wp-config.php and take over the site.
Avada Builder Patches Two Security Issues in 3.15.3
Avada Builder 3.15.3 patches an unauthenticated SQL injection and a Subscriber-level file read across 1 million WordPress sites. Find affected sites.
Breeze, Cloudways Cache Plugin, Has a Remote Code Execution Bug
Wordfence blocked 3,936 attacks in 24 hours against Breeze Cache below 2.4.5. CVE-2026-3844 is unauthenticated RCE on 400,000+ WordPress sites.
The WordPress Plugin You Trusted Was Sold to an Attacker
A buyer acquired 31 WordPress plugins, planted a backdoor in August 2025, and activated it in April 2026. Here is what happened and how to check your sites.
Smart Slider 3 Pro 3.5.1.35 Was a Malicious Release: Supply Chain Compromise
Smart Slider 3 Pro 3.5.1.35 was a malicious release pushed through the official update channel. RCE backdoor, hidden admin users. Update to 3.5.1.36.
4 Major WordPress Plugins Patched Security Flaws in March 2026
Elementor, Yoast SEO, WPForms, and Really Simple Security all shipped security patches in March 2026. What was fixed, and how to verify your sites.
Smart Slider 3 Hack Allows Any File to Be Downloaded
CVE-2026-3098 lets any subscriber download wp-config.php from 800,000 WordPress sites running Smart Slider 3. How to check and fix it.
How to Find and Disable the Guided Tours Plugin on Your Joomla Sites
Joomla Guided Tours wastes resources on live sites. Why you should disable it in production and how mySites.guru handles it automatically.
How to Stop Any Plugin Installs in WordPress Admin
Add DISALLOW_FILE_MODS to wp-config.php to block plugin and theme installs in WordPress admin. Code snippet, wp-cli usage, and how to enforce it.
WordPress Plugin Vulnerability Alerting
mySites.guru cross-references every WordPress plugin on your sites against Wordfence, CVE and custom threat databases, flagging vulnerable plugins instantly.
Auto-Upgrade 1000s of Plugins & Extensions
Update Joomla extensions, WordPress plugins, and CMS cores across all your sites from one mySites.guru dashboard. Select all, click upgrade, done.
Install Extensions to 1000+ Sites at Once
Install any Joomla extension or WordPress plugin across 1,000 sites in one go using the mySites.guru bulk install tool - no SSH or FTP needed.