Elementor

You know, you have to...

It's like, for anyone listening on the audio version, it's like Elementor or, you know, one of those old school WordPress builders that you had to kind of move stuff around, duplicate it and edit all this stuff in the sidebar.

And I just could not be bothered, like, faffing around with that, basically.

So I was like...

So you might connect like...

WordPress, if you're using that with Elementor to your CRM, creates the contact, so on and so forth.

It might create a task from there, so on and so forth.

It then kind of records the source as being the website.

Yeah.

I think historically in WordPress that's been like a, kind of a practice, right? You have your Gravity Forms plugin, and then there's the accessibility for Gravity Forms, right? And then there's Elementor, and then there's accessibility for Elementor or Divi, right? So on and so forth.

So I th- I think that kind of, you know, I think you did a really excellent job there, Joe, of kind of differentiating between, you know, fixing accessibility and actually using this as an experimental labs plugin to, one, solve, do a proof of concept, and two, collect, and to garner feedback and the buy-in for these features.

Yeah.

Thanks for listening to the WP Minute, part of the Matt Report Media Network.

This episode wouldn't be possible without our amazing pillar sponsors, Pressable, Kinsta, GoDaddy, 20i, and Elementor.

These brands are supporting WordPress media and helping us invest in your future as a WordPress professional.

Our Foundation Plus sponsors like Hostinger, BigScoots, StellarWP, PersonalizeWP, WeGlock, and PatchStack help us keep the lights on.

Offensive line doesn't look too bad.

I love Elementor and Andrew Thomas.

Tackle too early for interior.

DJ Reader.

So I'm still going to flag them and always check out the show notes.

But we have critical Elementor Pro flaw, which was exploited to take over WordPress sites.

And so if you use the Elementor Pro plugin, you need to look into that story.

We also have a SQL injection vulnerability in the all-in-one WP migration and backup plugin for WordPress.

So if you use that plugin, you need to investigate that as well.

Broadcom says no workarounds are available and recommends updating promptly.

Attackers are actively exploiting a critical vulnerability in the Elementor Pro WordPress plug in to upload webshells and execute arbitrary commands.

The vulnerability affects multiple versions and stems from faulty validation of file upload arrays in Elementor forms.

Wordfence says exploitation began August nineteenth, the same day Elementor released their latest version which includes the fix and they blocked nearly two hundred thousand attempts.

Exploitation requires a published Elementor pro form widget with a File Upload field.

Attackers can bypass validation to upload malicious PHP files which are then accessible for Remote Command Execution.

Administrators should immediately upgrade and inspect the plugins Form Upload directory for PHP files which WordFence says are a strong indicator of compromise.

I can customize it to you.

And I pair it with Elementor.

So Elementor makes it more of like a drag and drop.

design process, which is really, really nice.

And if I do want to like connect other pieces of your business with it, it's so much more easier because it's like, I just got to copy whatever piece of code your other platform gives me and plop it right on.

I was updating a client's website and she wanted like an events page because she has a lot of events coming up for her book launch.

She's an author.

And I wanted a place where like all these events could live, but I didn't want to like have to auto like update after every single event passes I have to like take it down and I have to like you know readjust the grid and put like the newest ones on top like I didn't want to have to do all that I wanted it to just be automatic so I created like I think I just all I did is I I uploaded one one plugin and the rest was just kind of like native with Elementor where I just made it like um I basically posted every single event like a regular blog post, but it was like it had a special rule so that like it would disappear after the event has passed.