source wordFence Blog Sept 1 2020

WordPress Safety and You

One of the posts I often make to my business Facebook page is about high-threat, zero-day, plugin vulnerabilities that WordFence discovers. It is a bit more trouble to post those through my website, but I still want to keep my followers updated about them. So here you go: If you are one of the 700,000+ users with the File Manager plugin, you should pay attention and update. Read the details on the WordFence Blog. This is actively being exploited as I post this.

Source: WordFence Blog https://www.wordfence.com/blog/2020/09/700000-wordpress-users-affected-by-zero-day-vulnerability-in-file-manager-plugin

Personally, I avoid using utility plugins like this on the sites I manage. They grant too much access and pose too big of a risk to make them worth it to me.