Outdated plugins drive 74% of WordPress vulnerabilities

One-third of the sites had three or more outdated plugins.

Sites with three or more outdated plugins accounted for 74.2% of confirmed WordPress vulnerabilities found across 102 Singapore business websites, according to Equinet Academy.

Its Singapore WordPress Website Cybersecurity Study found that 34 websites, or 33.3% of the sample, had at least three outdated plugins. These sites accounted for 1,375 of the 1,853 confirmed vulnerabilities detected.

The findings show that vulnerability exposure was concentrated amongst websites with larger plugin maintenance gaps, rather than being distributed across the sample.

Keeping WordPress core updated did not eliminate exposure to plugin vulnerabilities. Of the 48 websites running a current WordPress core version, 29, or 60.4%, still had confirmed plugin vulnerabilities. A further 25, or 52.1%, had at least one outdated plugin.

“Updating WordPress core is important, but it does not address vulnerabilities introduced through third-party plugins,” the analysis said.

Outdated WordPress core and plugins also appeared together across most websites running an outdated core version. Of the 41 websites with an outdated WordPress core, 39, or 95.1%, also had outdated plugins.

Those 39 websites accounted for 1,283 confirmed vulnerabilities, or 69.2% of all vulnerabilities detected in the study.

The supplementary analysis said regular updates, plugin management and ongoing website maintenance remain important components of reducing exposure.

The Singapore WordPress Websites Cybersecurity Study examined 102 publicly accessible WordPress websites operated by Singapore-based businesses through passive automated scanning.

Follow the link for more news on

cybersecurity

Reaching the people who run Asia's businesses is harder than it used to be.

Inboxes are crowded. Attention is short. The executives you most want to reach — the founders, CFOs, and operators who actually move budgets — are the hardest to find through the usual channels. If you're building a company, a category, or a reputation, you already know this.

We've spent twenty years building the room they read. Singapore Business Review is where senior decision makers in Singapore and across Southeast Asia come for business coverage they can't get elsewhere — in print, online, and in person at the summits and roundtables we host across seven markets.

If you have something these readers should know about — a point of view worth publishing, a product worth their attention, an event worth their time — we'd like to hear what you're trying to do.

Book a meeting

| Or download the media kit (PDF)

240,000 senior readers quarterly in print Top 1,700 Singapore companies reached

7 markets across Southeast Asia