Major Security Concern – WordPress GDPR Cookie Plugin
It has over 700,000 installs including in Ireland.
The last two years has seen the EU’s GDPR (General Data Protection Regulation) get significant airtime. While it has given greater data privacy rights to individuals in the European Union, it has also represented a major headache for Irish businesses. A lot of businesses have complied, but the majority are still playing catch up. However, we have yet to see major headlines of Irish SME’s receiving reprimands by the data protection commissioner.
Critical Security Vulnerability
One key feature of the regulation is around consent. On a website this is usually done through the cookie notice. Your business informs the user of what data is been collected and gives them the option to opt out. One of the most popular plugins in the WordPress Repository is GDPR Cookie Consent . It has over 700,000 installs including in Ireland. But 5 days ago a critical security vulnerability was uncovered that would allow a malicious individual to take full control of your website. You can read more details in the WordPress Vulnerability Database.
1.8.2 or below then you need to update your plugin urgently
If your website is running version 1.8.2 or below of the plugin, then you need to update your plugin urgently. While WordPress powers over 30% of the worlds websites, it also accounts for 90% of hacks. So keeping your website up to date is critical for your business.
Not sure where to start? Why not download our guide “Five Essentials for Keeping Your Website Safe” on our Care Plan page.