WP 5+ plugin updates and security concern

[ozfiddler]

@Rudy_Brinkman

This is not going to be a mess, it already is since plugins are not updated and give no warning an update needs to be done.

I first raised this back in January.

CP hacked via hidden outdated plugin, Easy WP SMTP

This is both a specific alert for the Easy WP SMTP plugin and a general warning. I have just had a site hacked by someone initiating a password reset, then accessing some information that allowed them to reset the password externally. They then deactivated the firewall but didn’t do much else and I was able to restore a backup this morning. Details are here: https://www.searchenginejournal.com/easy-wp-smtp-plugin-vulnerability/390109 I use this plugin on almost all my sites and when I checked…