WP Engine released a security update to address a Critical Vulnerability in the WordPress Better Search Replace Plugin.  An attacker could exploit this vulnerability to delete arbitrary files, retrieve sensitive data, or execute code.

For a complete description of the vulnerabilities and affected systems go to: Better Search Replace <= 1.4.4 - Unauthenticated PHP Object Injection.

IT Security

Read more about IT Security service offerings.