<p>Wordpress cybersecurity firms have reported of an increasing number of attacks on WordPress sites. The new forms of attacks have been focused on WordPress **plugins**. Many of the attacks exploit bugs which have only been recently patched or fixed by the plugin developers.</p>
<p>This means if you are using outdated plugins, it is possible for hackers to hijack your website and in some cases, wipe out your website content.</p>
<p>As reported by <a href="https://www.zdnet.com/article/hackers-are-actively-exploiting-zero-days-in-several-wordpress-plugins/" title="WordPress attacks">ZDnet</a>, some of the attacks are a bit more sophisticated and may not be detected by security tools.</p>
<p>Below are some of the known plugins that are being exploited although they are not the only plugins since it is likely that there are more:</p>
-DUPLICATOR -PROFILE BUILDER PLUGIN -THEMEGRILL DEMO IMPORTER
<p> We advise that you update your WordPress installation, plugins and themes immediately. Kindly add it to your priorities. </p> <p> Imunify360 which is available on our shared hosting servers can provide protection for well known exploits. However, since the attacks are sophisticated and new, it may not be able to detect all the attacks. </p> <p>Read more at ZDnet: https://www.zdnet.com/article/hackers-are-actively-exploiting-zero-days-in-several-wordpress-plugins/</p>