Having vulnerable theme and plugin files running on your WordPress website are the number one reason why websites get hacked. Making sure your WordPress core files as well as the theme and plugin files updated is critical in keeping your website secure and safe from hackers.
WordPress Core Vulnerabilities
Vulnerability: Expired DST Root CA X3 Certificate
Patched in Version: 5.8.2
Details: The wp-includes/certificates/ca-bundle.crt file contains a DST Root CA X3 which expired on September 30, 2021, raising a security warning in some instances.
This vulnerability has been patched, so make sure you update to WordPress 5.8.2
WordPress Plugin Vulnerabilities
There have been 19 WordPress plugin vulnerabilities reported so far in November, 2021. View them here and see if there’s a fix.
WordPress Maintenance Solutions
It is vital to keep WordPress core files as well as theme and plugins updated to close vulnerability holes. In order to do so, you have to make sure that the server environment is compatible with the new versions. Then, you have to be sure that the theme files are compatible with the plugin files, which are all compatible with the version of WordPress you are updating to. Sound confusing? Let us maintain your WordPress site(s) for you by choosing one of our WordPress maintenance plans, which include hosting. Contact us today.