{"id":18268,"date":"2026-07-03T13:52:49","date_gmt":"2026-07-03T06:52:49","guid":{"rendered":"https:\/\/www.chantroituonglai.com\/wordpress-security-note-the-plus-add-on-0-day-attack.html"},"modified":"2026-08-01T15:12:35","modified_gmt":"2026-08-01T08:12:35","slug":"wordpress-security-note-serious-security-error-of-elementor-the-plus-add-on-plugin-update-fixed-from-version-4-1-7","status":"publish","type":"post","link":"https:\/\/www.chantroituonglai.com\/en\/wordpress-security-note-serious-security-error-of-elementor-the-plus-add-on-plugin-update-fixed-from-version-4-1-7.html","title":{"rendered":"WordPress Security Note: Serious security error of Elementor The Plus Add-on plugin (Update: Fixed from version 4.1.7)"},"content":{"rendered":"\n

Report from the Plugin development team: Critical 0-Day The Plus Add-Ons Vulnerability Fixed Under 48 Hours<\/a><\/p>\n\n\n

Currently, WordPress websites that are using the Elementor The Plus Add-on plugin Pro version (The paid version is not currently affected), need to immediately update to update 4.1.7 (Download here This<\/a><\/em>).<\/p>\n\n\n

According to reports from developers on the WordPress platform, this security error is being exploited to directly attack WordPress websites: Redirect and Database malware. <\/p>\n\n wp:table-of-contents-block\/table-of-contents-block {“headers”:[{“level”:2,”content”:”I. Description of attack method”,”text”:”I. Description of attack method”,”link”:”i-description-of-attack-method”},{“level”:3,”content”:”1. Status: \\u003cstrong\\u003eWebsite automatically switches direction when accessing\\u003c\/strong\\u003e”,”text”:”1. Status: Website automatically redirects when accessing”,”link”:”1-status-website-automatically-redirects-when-accessed”},{“level”:3,”content”:”2. Malicious code in the source file of the website”,”text”:”2 website”,”link”:”2-malicious-code-in-source-file-of-website”},{“level”:3,”content”:”3. Malicious code in the website's database”,”link”:”3-malicious-code-in-the-website-database”},{“level”:2,”content”:”II. How to handle”,”text”:”II handle”,”link”:”ii-how-to-handle”},{“level”:4,”content”:”The first thing you need to check is the Elementor The Plus Add-on Plugin version and update to the latest version as soon as possible.”,”text”:”The first thing you need to check is the Elementor The Plus Add-on Plugin version and update to the latest version as soon as possible.” good.”,”link”:”first-thing-you-need-to-check-the-plugin-elementor-the-plus-add-on-version-and-update-to-the-latest-version-as-soon-as-possible”},{“level”:4,”content”:”STOPS TO HANDLE WHEN THE WEBSITE HAS BEEN INFECTED WITH MALICIOUS CODE (FROM 3-5 DAYS)”,,”text”:”STEP TREATMENT WHEN THE WEBSITE IS INFECTED WITH MALICIOUS CODE (FROM 3-5 DATE)”,”link”:”steps-to-handle-when-a-website-has-been-infected-with-malicious-code-from-3-5-days”}],”visibleHeaders”:[false,true,true,true,true,false],”title”:”CONTENT MAIN”,”titleBg”:”rgba(0,0,0,1)”,”contentBg”:”rgba(255,255,255,1)”,”contentColor”:”rgba(0,0,0,1)”,”contentHoverColor”:”rgba(73,181,249,1 )”,”contentGap”:15,”indent”:0,”contentFontSize”:17,”contentFontWeight”:”bold”,”contentTextTransform”:”uppercase”,”contentPaddingTop”:10} \n

MAIN CONTENTS<\/div><\/div><div class=”eb-toc-wrapper” style=”text-align:left;color:rgba(0,0,0,1);background:rgba(255,255,255,1);padding:10px 0px 0px 0px” data-headers=”[{“level”:2,”content”:”I. Description of attack method”,”text”:”I. Description of attack method”,”link”:”i-description-of-attack-method”},{“level”:3,”content”:”1. Status: <strong>Website redirects automatically when accessed