WP GDPR JUN 2021: Sensitive Data Disclosures JUN 2021

MANAGED WP GDPR JUN 2021 REPORT

Sensitive Data Disclosures JUN 2021

Be informed about the latest WP GDPR JUN 2021 - Sensitive Data Disclosures JUN 2021, identified and reported publicly. These Sensitive or Private Data Disclosures have a severe negative financial impact on any business. Consider our FREE GDPR AUDIT.

An estimated 410.000+ active WordPress installations are susceptible to these personal data exfiltrations, considering only the publicly available numbers. The estimated number can double with versions already closed due to security concerns.

It is a 233% increase compared to December 2020. We compare last month versus previous winter holiday season, which has the biggest shopping traffic and attack spike throughout the year. Read more about our previous reports here: WP GDPR JUN 2021: Sensitive Data Disclosures JUN 2021 and WP GDPR JAN 2021: 3 Sensitive Data Disclosures JAN 2021. The following cases made headlines PUBLICLY just last month in the WP GDPR JUN 2021 category:

---

• SP Project & Document Manager - Authenticated Shell Upload
  • This plugin has been closed as of June 28, 2022 and is not available for download. This closure is temporary, pending a full review.

---

• Gallery From Files - Unauthenticated RCE
  • This plugin has been closed as of May 24, 2022 and is not available for download. This closure is temporary, pending a full review.

---

• Simple 301 Redirects by BetterLinks - Update and Retrieve Wildcard Value
  • Got “404 not found” errors? Launching a marketing campaign with a new URL? Or relaunching your website with a new URL? Let’s redirect your old URLs to new ones automatically by creating 301 redirects to existing pages. Active installations: 200,000+

---

• 404 to 301 – Redirect, Log and Notify 404 Errors - Broken Access Control
  • If you care about your website, you should take steps to avoid 404 errors as it affects your SEO badly. 404 ( Page not found ) errors are common and we all hate it, even Search engines do the same! Install this plugin then sit back and relax. It will take care of 404 errors! Active installations: 100,000+

---

• NinjaFirewall - Authenticated PHAR Deserialization
  • NinjaFirewall (WP Edition) is a true Web Application Firewall. Although it can be installed and configured just like a plugin, it is a stand-alone firewall that stands in front of WordPress. Active installations: 60,000+

---

• WooCommerce Stock Manager - CSRF to Arbitrary File Upload
  • WooCommerce Stock Manager allows you manage stock for products and their variables from one screen. Active installations: 30,000+

---

• WP Image Zoom - Local File Inclusion
  • WP Image Zoom is a robust, modern and very configurable image zoom plugin. It allows you to easily create a magnifying glass on your images, all from a very intuitive WP admin interface. Active installations: 20,000+

---

• ZoomSounds - WordPress Wave Audio Player with Playlist - Unauthenticated Arbitrary File Upload
  • ZoomSounds is a complete premium audio plugin for WordPress that allows you to build great audio players and playlists. Engage with your audience with Trending, Likes, and awesome features. Fits your branding with a customizable design and great colors. With nine skins to fit every brand, multiple layouts for the wave skin, only one format required to function, ZoomSounds is the perfect choice for an audio player.

---

• The Plus Addons for Elementor - Arbitrary Reset Pwd Email Sending
  • Collection of 120+ Powerful Elementor Widgets, 18+ Templates, 300+ UI Blocks and Amazing Listing Builder for Post Types to surprise your clients with amazing Websites.

---

• The Plus Addons for Elementor - Open Redirect
  • Collection of 120+ Powerful Elementor Widgets, 18+ Templates, 300+ UI Blocks and Amazing Listing Builder for Post Types to surprise your clients with amazing Websites.

WP GDPR JUN 2021 BRIEF: Personal or Private data is information that must be protected against unauthorised access, preventing Sensitive Data Disclosures and data breaches.

---

What is Sensitive Data Disclosures JUN 2021?

The loss, misuse, modification or unauthorised access to your most sensitive data or personal data can damage your business, ruin customer trust, breach customer privacy and in extreme cases, might attract hefty fines by law regulations.

What is the impact of a WP GDPR JUN 2021?

Data privacy is becoming more and more imperative. Fines vary from country to country in Europe. In over 80 countries, personally identifiable information (PII) is protected by information privacy laws that outline limits to collecting and using PII by public and private organisations.

These laws require organisations to give clear notice to individuals about what sensitive data is collected, the reason for collecting and the planned uses of the data. In consent-based legal frameworks, like GDPR, explicit consent from the individual is required.

What kind of Sensitive Data are exploited??

Sensitive information includes all Private Data, whether original or copied, which contains:

- Personal data: as defined by The EU General Data Protection Regulation (GDPR). A series of broad laws to prevent or discourage identity theft and to guard and protect individual privacy. In general, sensitive data is any data that reveals: Racial or ethnic origin; Political opinion; Religious or philosophical beliefs; Trade union membership; Genetic data; Biometric data; Health data; Sex life or sexual orientation; Financial information (bank account numbers and credit card numbers); Classified information.

- Protected Health Information (PHI): as defined by the Health Insurance Portability and Accountability Act of 1996 (HIPAA). PHI under the law is any information about health status, provision of health care, or payment for health care that is created or collected by a Covered Entity (or a third-party associate) that can be linked to a specific individual.

- Education records: as defined by the Family Educational Rights and Privacy Act of 1974 (FERPA). FERPA governs access to educational information and records by potential employers, publicly funded educational institutions, and foreign governments.

- Customer information: as required by financial institutions to explain how they share and protect their customers' private information.

Related Posts to MANAGED GDPR for your WP/Woo: