It’s that time again folks.
A critical security update has been released today by WordPress which will protect sites from recently discovered security vulnerabilities that could be exploited by hackers. It is important that this critical update be performed on all WordPress websites as soon as possible, and we’ll be applying this update to all client websites that are currently managed by iNETinitiatives.
Our last critical security update was in April, 2015, which brought all sites up to current secure release in relatively record time. It’s just been determined that WordPress versions 4.4.1 and earlier are affected by a critical vulnerability, which could enable anonymous users to compromise a site, hence today’s update.
Its frustrating to know that your website could be compromised. Just like a petty thief, hackers don’t only set their eyes on big, highly trafficked and name-recognized websites. They spend a lot of time honing their break-in skills and they do that on any site that might have a vulnerability regardless of the content, the size, whether it contains sensitive data or not, or is highly trafficked. Any site, using any Content Management System (of which WordPress is the most popular in the world) can fall victim.
Beginning in March, 2016, we’ll be adding WordPress release updates to a monthly Website Management maintenance offering. As the online world continues to change, the demand for consistent management of your website database back-ups, your onsite security and your site’s WordPress core and plug-in files will be bundled into a regular service. This will allow for a better level of security for your site as well as a regular expense that you can plan for instead of the on-demand effort that has been put forth in the past.
To learn more about the WordPress 4.4.2 Security Release please review the official notes.
