Important Vulnerability on Advanced Custom Fields Plugin for WordPress

Dear Customers,

We hope this message finds you well. We are writing to inform you of a recent issue with ImunifyEmail.

Dear Imunify Users,

We have an important update regarding the development of ImunifyAV, ImunifyAV+, and Imunify360 on CentOS 6 and CloudLinux OS 6.

Recently Imunify360 malware researchers received a couple of requests by the community to examine the “Quick Page/Post Redirect Plugin”. The plugin is widely used roughly in ~100k installations. This investigation will expose techniques used by plugins to inject ads passively into websites, in most of the cases the website’s owners do not even know or allow it. It will answer questions made by WordPress' broader community which didn’t have a chance to have proper feedback on forums.