Important Vulnerability on Advanced Custom Fields Plugin for WordPress

We’re pleased to announce a new beta version of ImunifyAV(+). Version 6.6 is now available. The following features are new in the v6.6 beta release. Discover more features in the Imunify360.

We’re pleased to announce a new beta version of Imunify360. Version 6.6 is now available. The following features are new in the v6.6 beta release:

We’re pleased to announce a new version of ImunifyAV(+). This release does not contain any specific new features or major updates. Nevertheless, we are working on improving ImunifyAV(+) every day. We added a set of performance and stability improvements in version 6.5. Discover more features in the Imunify360.

We’re pleased to announce a new version of Imunify360. Version 6.5 is now available. The following features are new in the v6.5 release:

• WebShield improvement
  In this release, we present a new and improved WebShield. Starting from version 6.5, WebShield will work faster and consume even fewer resources. We improve performance by running WebShield as a pure Nginx module.

• Language support for SplashScreen
  Version 6.5 broadens the set of languages supported by our SplashScreen. 

Hi ImunifyAV(+) user!

We want to keep you posted on safe security practices and make sure you’re aware of the best way to protect your web servers. We created this message to notify you of the importance to scan regularly when the regular scan is disabled:

Dear Client,

We are sending this message to keep you informed on security threats. We found out that entirely too much time passed since you last scanned your server. Regular malware scanning is crucial for ensuring security.

Server: abcd.atm.cloudlinux.com (123.45.67.89)
Last scan: 8 days ago

It is highly recommended setting up a background scan at Malware scanner settings page (in WHM: Plugins » Imunify » Settings » Malware) in order to maintain a proper level of security.

The Imunify Security team is always working hard to ensure you’re receiving the highest level of protection possible. Now we’re setting up a number of notifications to inform you about potentially threatening configurations on your server. Whenever you receive a message from us that starts like this …

“Dear Administrator,

We are reaching out to you to keep you informed on security threats. The list below shows vulnerable software that has been detected in your environment:

• Actively Exploited Plugin Vulnerability - /home/johndoe/public_html
• Severity: CRITICAL
• WordPress 6.0
• Affected Plugin: Download Manager
• Affected Versions: <= 3.2.42  
• …”

The Imunify Security team is always working hard to ensure you’re receiving the highest level of  protection possible. Now we’re setting up a number of notifications to inform you about potentially threatening configurations on your server. Whenever you receive a message from us that starts like this… 

“Dear Administrator,

We like to be proactive, which means the Imunify360 Security team keeps you informed about security threats. The software listed below is vulnerable because of outdated versions of WordPress in your environment.

• Outdated WordPress version
• Location: /home/johndoe/public_html
• Installed version: 4.9.1
• Most recent version: 4.9.2
• …”

Hi ImunifyAV(+) user!

We care about your security first and foremost, so there will be times when you may receive a message like this:

Dear Client,

You are receiving this message because our system, which is designed to keep you informed of security threats, detected malicious files on server abcd.atm.cloudlinux.com (123.45.67.89) on the account "johndoe.” 

...

Please review the scan details and take the appropriate actions to remove malware as soon as possible to mitigate security risks.

We’re pleased to announce a new beta version of Imunify360. Version 6.5 is now available. The following features are new in the v6.5 beta release:

We’re pleased to announce a new beta version of ImunifyAV(+). This release does not contain any specific new features or major updates. Nevertheless, we are working on improving ImunifyAV(+) every day. We added a set of performance and stability improvements in version 6.5. Discover more features in the Imunify360.