WordPress administrators have been cautioned to uninstall a problematic plugin or risk a total site takeover.
This threat is associated with a plugin that is no longer in use: Modern WPBakery page builder extensions. CVE-2021-24284 is a vulnerability in the plugin that allows "unauthenticated arbitrary file upload through the 'uploadFontIcon' AJAX action."
As a result, attackers might upload malicious PHP scripts to the WordPress site, resulting in remote code execution and site takeover.
There has been a significant surge in attacks due to this defunct WordPress relic.
Researchers detected "many vulnerable endpoints" in Modern WPBakery in 2021, which might lead to the injection of malicious JavaScript or even the deletion of arbitrary data.
The goal of the game this time is to upload rogue PHP files and then inject malicious JavaScript into the site.
Approximately 1.6 million sites have been examined for the presence of the plugin by malicious actors, and current estimates imply that 4,000 to 8,000 websites are still hosting the plugin.
Check and delete immediately.
The current recommendation is to search for the plugin and then uninstall it as quickly as possible. It has been entirely abandoned, and no security updates will be sent.
If anyone has it installed, it's only a matter of time until the exploiters find their way to your Modern WPBakery hosting website and begin collecting information. It's advised to as soon as possible, remove this out-of-date invitation to site-wide compromise.
