Warning about a Plug In.

I was reading an email from a security expert who talks about many cyber security related issues. I thought I would share this from his article, in case anyone has this plug in.

The plug in is called Rich Reviews and this person, Graham Clueley, who talks about many cyber security related issues, has an article on it. He seems to know what he is talking about. I signed up a few years ago after being alerted to a security issue with a site I was on, that hadn't already become common knowledge. So I changed passwords etc and didn’t have a problem.

Apparently many Wordpress websites have been hacked due to it and an estimated 16,000 websites are believed to be still running it. It has been exploited to display pop up ads that redirect visitors to all manner of unsavoury websites as well as to malware that invests sites.

In March 2019 it was removed from the official Wordpress plugin library because of a ‘Security Issue’.

The advice given was to remove the plugin.

Apparently the developers are working on a patched version supposed to be ready soon, within a few weeks. But the article points out that it would have to be reinstated by Wordpress before vulnerable websites could use.

I don’t usually write about stuff like this but knowing we all have Wordpress sites, it bothered me that someone here might have it, so I thought I would add this in case it helps someone.

I did a quick search in case someone else had put something about it but couldn’t find anything.