WPBakery Vulnerability

[info]

Hi there,

Are you guys aware of the WPBakery vulnerability which Wordfence posted on their blog yesterday and do you have a protection in place for it?

We have so many older WPBakery plugins on our servers and its impossible to get all those clients to upgrade to the latest so it falls to Cloudlinux to protect them unfortunately.

Ive include the link in this post.

Thanks
Glenn

[skhristich]

Hello Glenn,
Thank you for contacting us. Our developers discussed this vulnerability and clarified that vulnerability is not really relevant for the next reasons:

- the attackers should have the privileges of the author or contributor, therefore, third-party attackers cannot exploit the vulnerability, only people working with the page
- blocking the editing of the template will create a lot of false-positive and will disrupt the work of valid changes

If you have any other questions, feel free to ask here.

[glenn]

Thanks for this update Sergey. Thats good to hear.