Question 1

What exactly is the Enhanced Text Widget plugin?

Accepted Answer

What exactly is the Enhanced Text Widget plugin?

The Enhanced Text Widget is a popular WordPress plugin with over 700,000 downloads. It enables advanced formatting and content within text widgets, beyond what the native WordPress text widget allows. This includes adding images, links, HTML etc.

Question 2

What does this vulnerability allow an attacker to do?

Accepted Answer

What does this vulnerability allow an attacker to do?

This stored cross-site scripting (XSS) vulnerability enables an attacker with admin access to inject malicious scripts into webpages through the plugin's widget configuration options. When users visit a page with an infected widget, the script gets executed in their browser potentially exposing session tokens, cookies and other sensitive data.

Question 3

How can I tell if my site is vulnerable or has been compromised?

Accepted Answer

How can I tell if my site is vulnerable or has been compromised?

If you have the Enhanced Text Widget installed, you are vulnerable if running any version up to and including 1.6.5. Manually check widget settings for unauthorized code injections. Also scan pages for unwanted iframes, redirects etc. Signs of compromise include unexpected interface/behavior changes, spammy content appearing or users complaining they got hacked after visiting your site.

Question 4

Why does keeping plugins updated matter so much?

Accepted Answer

Why does keeping plugins updated matter so much?

Developers routinely find and patch plugin vulnerabilities. Attackers also constantly probe them for weaknesses. Leaving plugins outdated means your site runs known-vulnerable code that may get exploited. Always use the latest versions of plugins, themes and WordPress core software.

Question 5

What should Enhanced Text Widget users do to protect their sites?

Accepted Answer

What should Enhanced Text Widget users do to protect their sites?

Immediately update to version 1.6.6 or higher available from your dashboard. If infected, reset plugin options and scan thoroughly for other suspicious changes. Consider limiting admin users, enabling 2FA and monitoring activity logs. Also diversify plugins used rather than rely heavily on just one or two.

Question 6

How serious is this vulnerability?

Accepted Answer

How serious is this vulnerability?

While rated medium severity, the ability to run scripts opens serious attack avenues. Impacts range from nuisance defacements to full site takeovers, backdoors and cryptominers. Data theft is also possible depending on what pages were infected and what visitor data they access.

Question 7

Why do plugins have so many vulnerabilities?

Accepted Answer

Why do plugins have so many vulnerabilities?

Plugins extend WordPress in complex, feature-rich ways. All this additional code from various developers creates a large attack surface. Coding mistakes, gaps in security knowledge and unreliable maintenance lead to recurring vulnerabilities in popular plugins.

Question 8

Are other plugins at risk too?

Accepted Answer

Are other plugins at risk too?

Yes, vulnerabilities are continually uncovered across plugins and themes. Using tools like Wordfence Scanner to audit site security is advised, in addition to updating software. Reduce reliance on unnecessary plugins, vet developer reputation and restrict plugin permissions to limit exposure.

Question 9

What if I need the features Enhanced Text Widget provides?

Accepted Answer

What if I need the features Enhanced Text Widget provides?

You can retain functionality after updating Enhanced Text Widget to the secured 1.6.6 version. Alternatively, check the plugin directory for alternatives should you wish to replace it entirely as a precaution. Using native widgets where possible is generally the most secure option.

Update Plugin

Enhanced Text Widget Vulnerability – Authenticated (Administrator+) Stored Cross-Site Scripting – CVE-2024-0559 | WordPress Plugin Vulnerability Report

WP Go Maps Vulnerability – Reflected Cross-Site Scripting – CVE-2023-6697 | WordPress Plugin Vulnerability Report

Ninja Tables Vulnerability – Missing Authorization – CVE-2024-23504 | WordPress Plugin Vulnerability Report

MW WP Form Vulnerability – Improper Limitation of File Name to Unauthenticated Arbitrary File Deletion – CVE-2023-6559 | WordPress Plugin Vulnerability Report

WordPress Plugin Vulnerability Report – Export and Import Users and Customers – Authenticated (Shop Manager+) Arbitrary File Upload – CVE-2023-6558

WordPress Plugin Vulnerability Report – MW WP Form – Unauthenticated Arbitrary File Upload – CVE-2023-6316

WordPress Plugin Vulnerability Report – Shortcodes Ultimate – Authenticated (Contributor+) Stored Cross-Site Scripting & Insecure Direct Object Reference to Information Disclosure – CVE-2023-6225 & CVE-2023-6226

WordPress Plugin Vulnerability Report – Paid Memberships Pro – Authenticated (Subscriber+) Arbitrary File Upload – CVE-2023-6187

WordPress Plugin Vulnerability Report – Table of Contents Plus – Authenticated (Administrator+) Stored Cross-Site Scripting

Recent Blog Posts

LiteSpeed Cache Vulnerability – Unauthenticated Sensitive Information Exposure via Log Files – CVE-2024-44000 | WordPress Plugin Vulnerability Report

Elementor Addon Elements Vulnerability – Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Parameters – CVE-2024-4401, CVE-2024-7122 | WordPress Plugin Vulnerability Report

The Post Grid – Shortcode, Gutenberg Blocks and Elementor Addon for Post Grid Vulnerability – Authenticated (Contributor+) Information Disclosure – CVE-2024-7418 | WordPress Plugin Vulnerability Report

Additional Resources

About Your WP Guy