Free: Assessment Does your website build trust with buyers and bring in revenue?

Score My Website
Close

Free: Assessment

Does your website build trust with buyers and bring in revenue?
Take this free 6 question assessment and learn how your website can start living up to its potential.
Score My Website
Marc Amigone

By Marc Amigone

Mar 9, 2020

Topics:

Web Design News
Web Design  |   News

These 8 WordPress plugins are most vulnerable to hackers in 2020

Marc Amigone

By Marc Amigone

Mar 9, 2020

These 8 WordPress plugins are most vulnerable to hackers in 2020

According to a report from ZDNet, February 2020 saw a noticeable increase in hacking attempts on WordPress websites.

Given WordPress’ ubiquitous presence across the internet (36% of all websites are built on WordPress according to W3Techs), hackers have lots of opportunities to exploit weaknesses and extract valuable information.

Being an open-source system, WordPress always has and always will be vulnerable to these types of incidents. It’s the ultimate trade-off of a system designed to open itself to developers and users all over the world with a very low barrier of entry. 

Individuals and businesses can build a robust website on the WordPress platform and utilize plugins developed for a wide variety of purposes, but maintaining those websites and especially the plugins is a labor-intensive, yet critically important, task.

So how do you know if your website is vulnerable to attack based off this information? It’s never a bad time to go into your WordPress setup and make sure all of your plugins are up to date — and if you’re not using a secure hosting platform like WP Engine, it’s also not a bad time to look into it. 

WordPress plugins most at risk

ZDNet focused its report on eight popular plugins that are providing hackers the most opportunities; so if any of these are installed on your website, stop what you’re doing and go update them:

Duplicator (1 million+ installs)

Duplicator successfully gives WordPress users the ability to migrate, copy, move, or clone a site from one location to another, and also serves as a simple backup utility.

Duplicator handles serialized and base64 serialized replacements. Standard WordPress migration and WordPress backups are easily handled by this plugin as are zero downtime migrations.

ThemeGrill Demo Importer (200,000 installs)

ThemeGrill Demo Importer allows users to import ThemeGrill official themes demo content, widgets, and theme settings with just one click.

Profile Builder Plugin (65,000 installs)

A plugin that generates shortcodes for creating front-end login, user registration, and edits profile forms making the process simpler and easier for end-users.

Flexible Checkout Fields for WooCommerce (20,000 installs)

With this plugin, you can edit the default WooCommerce checkout fields (change labels, hide, and delete) or add your own.

ThemeREX Add-ons

If you’re using a ThemeREX theme, check out any add-ons or plugins you’ve installed to make sure they’re up to date.

Async JavaScript (100K installs)

This plugin allows you to control when JavaScript loads or doesn’t load on your pages to protect load times and increase site performance.

10Web Map Builder for Google Maps (20k installs)

10Web Map Builder for Google Maps allows users to add unlimited maps to their website.

Modern Events Calendar Lite (40k installs)

Modern Events Calendar is an events management plugin used for displaying events calendars on websites.

WordPress site security

At IMPACT, we often recommend the HubSpot CMS to our clients to avoid vulnerabilities created by WordPress plugins. That being said, HubSpot isn’t a viable option for every business’ CMS, so we develop dozens of websites on WordPress each year as well.

For any website we build on WordPress, we stipulate that our clients have to use WP Engine as their hosting platform to protect against attacks.

WP Engine offers security features such as monitoring plugins, ensuring any that are out of date are updated and notifying their customers of vulnerabilities as they emerge.

It’s never a bad time to do an analysis of your website’s security, whether you use WordPress or not. The internet can be a dangerous place, so following best practices to protect your business’ data is never a bad idea.

Free: Assessment

Does your website build trust with buyers and bring in revenue?
Take this free 6 question assessment and learn how your website can start living up to its potential.

Related Articles

Can I Use AI Tools To Build My New Website?

September 18, 2023
Vin Gaeta Vin Gaeta

What Is a 'Learning Center' and Why Does My Website Need One?

September 14, 2023
John Becker John Becker

How Much Does a Website Redesign Cost in 2023?

July 20, 2023
Vin Gaeta Vin Gaeta

Do You Need a New Website? Maybe Not

July 19, 2023
Vin Gaeta Vin Gaeta

14 Award-Winning Website Designs (& What They Did Right)

July 17, 2023
Christine Austin Christine Austin

What a New Self-Selection Tool for Your Website Will Cost

July 13, 2023
John Becker John Becker

9 Self-Selection Tools to Inspire Your Business Website

July 10, 2023
John Becker John Becker

Website Conversions in 2023 — STOP, START, KEEP

January 25, 2023
Vin Gaeta Vin Gaeta

8 of the Best Business Website Designs to Inspire You in 2023

November 17, 2022
Ramona Sukhraj Ramona Sukhraj

What Does a Great Inbound Marketing Website Look Like in 2023?

November 14, 2022
Ramona Sukhraj Ramona Sukhraj

Your 2023 Website Strategy Must Include These 6 Things

November 4, 2022
Mary Brown Mary Brown

4 Ways To Recession-proof Your Website In 2023

November 1, 2022
Marcus Sheridan Marcus Sheridan

Website Mastery: A better redesign process for your business website

November 1, 2022
John Becker John Becker

8 Best Content Management Systems for Digital Marketing in 2023

October 1, 2022
Ramona Sukhraj Ramona Sukhraj

12 Essential Tips for Improving Your Web Design in 2023

September 13, 2022
Christine Austin Christine Austin

23 of the Best Examples of Business Blog Design

May 30, 2022
Christine Austin Christine Austin

5 Prep Secrets for a Smoother, More Successful Website Project Plan (+ Infographic)

May 16, 2022
John Becker John Becker

Website Redesign Checklist: The 12 Crucial Steps You Need To Be Successful

February 22, 2022
Joe Rinaldi Joe Rinaldi

11 Pricing Page Examples for Business Websites (Updated for 2023)

January 18, 2022
Liz Murphy Liz Murphy

8 Crucial Elements Every Homepage Design Should Have

January 15, 2022
Ramona Sukhraj Ramona Sukhraj

What Makes a Good Website Design? 7 Award-Winning Examples To Be Inspired By

December 18, 2021
Kimberly Marshall Kimberly Marshall

Why Homepage Carousels Are Bad (& 3 Alternatives to Try Instead)

August 26, 2021
Joe Rinaldi Joe Rinaldi

Google Shares New Tools to Audit Website User Experience

August 12, 2021
Paul D. Grant Paul D. Grant

New HubSpot CMS Hub Starter Tier Released for Growing Businesses

August 6, 2021
Paul D. Grant Paul D. Grant

Too many internal links in content can confuse Google about site structure

July 9, 2021
Liz Murphy Liz Murphy