Blog
-
Risparmio per il Giorno della Memoria! Aggiorna il tuo sito WordPress per sempre con questo plugin ChatGPT da $ 50
Se disponi di un sito Web WordPress, ChatGPT può fornire un potente impulso, aiutandoti con la SEO e aggiungendo nuove funzionalità front-end che potrebbero aiutare notevolmente i visitatori del sito.
Fortunatamente, puoi facilmente aggiornare la funzionalità del tuo sito e l'esperienza dei visitatori con a . In vista del Memorial Day, il prezzo di questo plugin ChatGPT verrà abbassato a $ 49,97 (reg. $ 299) fino al 31 maggio.
Sviluppato da una delle risorse di sviluppo software più apprezzate di Upwork, questo plug-in ChatGPT per siti Web WordPress si collega al tuo attuale account OpenAI. È progettato per essere facile da configurare sia per usi front-end che per applicazioni back-end. Puoi anche personalizzarlo per renderlo disponibile solo ai visitatori del sito che hanno effettuato l'accesso.
Per l'utilizzo front-end, può offrire ricerche più dettagliate e complesse, fungere da chatbot per le richieste dei lettori e aiutare a completare altre attività per rendere più accessibile l'esperienza di navigazione dei visitatori del sito.
Sul back-end, i proprietari dei siti possono farlo aggiorna i vecchi post del blog con nuove informazioni e termini corretti oppure automatizza le attività ripetitive in modo da poterti concentrare su attività più complesse per mantenere aggiornato il tuo sito.
Migliora l'usabilità del tuo sito WordPress con questo fino al 31 maggio alle 23:59 Pacifico.
Plug-in WordPress ChatGPT: licenza a vita
prezzi soggetti a modifiche.
-
12 WordPress Portfolio Plugins to Showcase Your Best Work – Go WordPress
Trying to create a portfolio to showcase your work to potential clients?
WordPress portfolio plugins can help you put your best foot forward by letting you manage all of your portfolio items from one spot and display them in a user-friendly layout on your site.
In this post, you’ll discover 12 excellent WordPress portfolio plugins that can help you display any type of work on your site, from writing to photography, videos, projects, and more.
We’ll start with a quick rundown of why using a portfolio plugin might work better than trying to manually design your own portfolio page. Then, we’ll dig into each plugin’s key features and what types of projects it works best for.
You’ll also learn how the WordPress.com Portfolio Projects feature can let you create a custom portfolio without the need for a plugin.
Let’s get started!
Why Use WordPress Portfolio Plugins?
If you want to add a portfolio to your website, one simple option is to just create a new page for your portfolio. You can add your portfolio content directly to the page using the editor and call it a day.
There’s nothing wrong with this approach, and it might even be the best option for some simple use cases.
However, there are also some advantages to using a dedicated WordPress portfolio plugin instead of a static page.
One of the biggest advantages is that using a portfolio plugin makes it easier to add new portfolio items going forward. With a static page, you would need to manually edit the page and adjust the layout each time you want to add a new portfolio item.
But with a portfolio plugin, you can just add a new portfolio item via the plugin’s interface, and then the plugin will automatically display it on your portfolio page.
It works very similarly to adding a blog post – when you add a new blog post, it automatically appears on your blog listing page using the same design as other items.
It will be the same for your portfolio items – you just add the portfolio item, and it automatically shows up on your portfolio page using a consistent design with your other portfolio items.
Beyond that, you get some other notable advantages when you use a WordPress portfolio plugin:
- Access more design options – portfolio plugins make it easier to control the design of your portfolio and typically give you multiple layouts such as lists, multi-column grids, sliders, masonry layouts, and more.
- Use categories and tags for organization – you can add categories and tags to individual portfolio items to help organize them. For example, if you’re creating a freelance copywriting portfolio, you could use categories to organize your different writing work, such as “blog posts”, “landing page copywriting”, “email copywriting”, etc.
- Let potential customers filter portfolio items – most portfolio plugins will also let your potential customers use these categories and tags to filter your portfolio, which lets customers find portfolio items that are relevant to the type of work that they’re looking for.
If you feel like those types of features could help you create a better portfolio, you might want the help of a dedicated portfolio plugin.
Top Portfolio Plugins to Consider
If you want to use a portfolio plugin on your site, here are some of the best WordPress portfolio plugins to consider.
Visual Portfolio
Visual Portfolio is a popular WordPress portfolio plugin that, true to its name, helps you create visual portfolios that showcase images or videos.
You can add visual effects and choose from several different layouts, including the following:
- Masonry gallery
- Justified gallery
- Tiles gallery
- Grid gallery
- Slider gallery
This can make it an especially great option for photography portfolios or other similar types of portfolios (e.g. videography). It also includes some special photography-focused features, such as image theft protection, client photo proofing, and more.
However, you can also use it for other types of work. For example, if you’re creating a web design portfolio, you could add screenshots of your designs to the visual lists.
Visual Portfolio has a free version that should work fine for simple portfolios. For more advanced features, Visual Portfolio Pro starts at $39 for use on a single site.
WPZOOM Portfolio
WPZOOM Portfolio is a simple free WordPress portfolio plugin that lets you set up your portfolio using a dedicated portfolio block.
While the plugin does assume that you’ll add an image for each portfolio item, you can use it for any type of work. For example, if you’re adding a blog post to your portfolio, you could use a picture of the live blog post.
You can add new portfolio items using a dedicated interface. Then, you can use the portfolio block to embed those portfolio items on any page using your choice of three different layouts:
- Columns
- Grid with overlay
- Columns
You can also add a real-time category filter to make it easier for your potential clients to filter different types of portfolio items.
WPZOOM Portfolio is 100% free and works with any theme.
WordPress Portfolio Builder
WordPress Portfolio Builder helps you create a portfolio for any type of work, including support for images and videos.
To display your portfolio items, you can choose from seven different portfolio layouts, including the following:
- List
- Gallery / content popup
- Masonry
- Blocks toggle up/down
- Content slider
- Image grid
- Elastic grid
In addition to showing the image/video in the portfolio list, you can also include a title, summary, and “read more” button.
If you want more functionality, there’s also an affordable premium version that gives you more options for customizing the style and design of each layout. The free version still gives you access to all seven layouts, though.
Portfolio and Projects
The aptly named Portfolio and Projects plugin gives you another simple option for adding a portfolio to your site.
You can add your portfolio items using a dedicated interface, much like how you add blog posts to your site.
Then, you can display your portfolio items anywhere on your site using a dedicated block or shortcode.
The free version lets you display your portfolio items in a customizable grid, while the premium version adds 15+ preset designs and other more advanced features.
The premium version also adds other more advanced features such as real-time filters, drag-and-drop portfolio ordering, page builder integrations, and more.
Portfolio and Projects has a free version that should work fine for simple portfolios. If you want more design options, filters, and other advanced options, Portfolio and Projects Pro starts at $99 as part of the developer’s Essential Plugin bundle, which also gets you access to 35+ other plugins.
If you want to go beyond the free version, the premium version starts at just $19.
Responsive Filterable Portfolio
Responsive Filterable Portfolio helps you create a stylish portfolio with front-end filters to help your potential clients find the work that’s most relevant to their needs.
For portfolio items, you can add links, images, or videos. You can then display those portfolio items in a grid and embed them anywhere on your site using the plugin’s shortcode.
There’s a free version of the plugin that should work fine for simple use cases.
Then, there’s also a premium version that adds more features such as pagination, captions, support for unlimited portfolio items, and more.
If you need those features, Responsive Filterable Portfolio Pro starts at just $18.13.
Portfolio Filter Gallery
Portfolio Filter Gallery is a popular WordPress portfolio plugin that helps you create a visual portfolio gallery.
You can use it for pretty much any type of work, including images, videos, links, and more. You can also add titles and descriptions to portfolio items in addition to the visual elements.
To help customers browse your work, Portfolio Gallery also lets you add frontend filters.
The free version of Portfolio Gallery already lets you create a good-looking portfolio in a multi-column layout – including the option to use a lightbox popup for more detail.
The Pro version gives you lots more design options, including the following:
- Visual filter effects for portfolio items, including 30+ hover effects.
- Option for visitors to sort portfolio items by publish date.
- More advanced portfolio filters.
- More style and color options.
If you want those features, the premium version starts at $39.
Portfolio
The creatively named Portfolio plugin offers an all-in-one solution to help you create a portfolio for any type of work.
You can add your portfolio items using a dedicated area in your WP Admin, and the plugin also lets you choose whether or not to add images for each portfolio item.
Then, you can display your portfolio using four different layouts in the free version of the plugin or 50+ layouts if you pay for the premium version. These layouts include grids, sliders, lists, and more.
You can then embed your portfolio anywhere on your site using the plugin’s block or shortcode. When adding your frontend portfolio, you can also choose to only include certain portfolio items in that embed.
For example, this would let you create separate portfolios for different types of work while still managing your portfolio items from a single unified interface.
There’s a free version of the plugin that’s plenty capable for basic portfolios.
If you want access to all of the premium layout options and other advanced features, the premium version of the plugin starts at $24,
Portfolio Gallery
The Portfolio Gallery plugin from Total-Soft is another popular option that helps you create a visual portfolio using a gallery layout.
Because of its layouts and designs, Portfolio Gallery makes an especially great option for creating a portfolio of visual work, such as graphic design, photography, art, videography, and so on.
You could use it for other types of work, but other portfolio plugins on this list are probably better suited to those other use cases.
You can display your portfolio items in 8+ layouts, including the following:
You can have portfolio items open in a lightbox popup and also add various visual effects, such as hover effects, zoom, and more.
If you have a lot of portfolio items, the plugin also gives you the option to create front-end filters for your portfolio.
Portfolio Gallery has a free version that’s fine for basic visual portfolios. To unlock all of the features, layouts, and design options, the premium version starts at just $15.
Portfolio Post Type
Portfolio Post Type is a little more limited than some of these other WordPress portfolio plugins.
Instead of helping you show your portfolio on the front end, Portfolio Post Type is focused on adding the backend structure needed to add portfolio items in your WP Admin.
In more technical terms, Portfolio Post Type registers a “Portfolio” custom post type, along with some custom taxonomies, to help you organize portfolio items with categories and tags.
Once you activate the plugin, you’ll be able to add any type of portfolio item by going to Portfolio → Add New Item.
By default, the frontend portfolio listing page will display using your theme’s templates, which means it will look similar to your blog listing page. However, there are lots of ways that you can modify this.
The most straightforward approach would be to use the native WordPress Query Loop block to create a custom design to showcase your portfolio items. Or, you could use the “Posts” widget in WordPress page builder plugins like Elementor and Beaver Builder.
For more technical users, you could also use code to create a custom template in your theme.
The Portfolio Post Type plugin is 100% free.
Note – the Portfolio Post Type plugin hasn’t been updated in a few years. While that would normally be cause for concern, the plugin performs a very simple function, so you don’t need to worry about compatibility issues.
Portfolio for Elementor
As the name suggests, Portfolio for Elementor is a plugin that’s specifically focused on helping you create a front-end portfolio design using the Elementor builder plugin.
It’s a pretty flexible plugin, so you can use it to create a portfolio of any type of work.
To make that happen, it adds a new Portfolio widget to Elementor that lets you display portfolio items in various layouts, including the following:
- Multi-column layout (anywhere from two to six columns)
- Masonry grid
- Some unique creative grid designs
It also adds a widget that lets you create a portfolio with front-end filters. This can be a good approach if you have a lot of portfolio items because it lets your potential clients easily filter out your most relevant work.
To help you manage your portfolio items, the plugin also adds a new Portfolio area to your WP Admin. You can add unlimited portfolio items by going to Portfolio → Add New Item and also organize them using portfolio categories.
The Portfolio for Elementor plugin has a free version that should work for most portfolios. There’s also a premium version that adds more layout options and visual effects.
If you want those extra features, the premium version starts at $24.90.
Grid Kit Portfolio Gallery
Grid Kit Portfolio Gallery is another popular option that lets you create a stylish portfolio on the front end of your site.
You can use it for any type of work, but the plugin’s designs do assume that each portfolio item will have a unique image. If your type of work isn’t visual, you could still make this work by using the client’s logo or some other image that’s still relevant to the work that you completed.
To manage portfolio items, the plugin gives you a dedicated interface. For each portfolio item, you can add the following:
- Text title
- Cover picture
- Text or HTML description
- Link
- Additional picture
- Video
- iframe embed
- Map embed
Then, you can embed your portfolio anywhere on your site using the plugin’s layout builder.
If you want more advanced design options, there’s also a premium version that adds 12+ total layouts, 3+ popup styles, filters, and more.
You can get started by using the free version. If you want those paid features, the premium version starts at $49.
Novelist
Novelist is a more limited WordPress portfolio plugin in that it’s specifically focused on a single use case – helping authors create a portfolio of their books/publications.
If you’re a writer looking to show off your work, this is one of the best WordPress portfolio plugins to consider. But if you’re looking to create a different type of portfolio, you’ll probably want to look elsewhere.
With the plugin, you can easily add unlimited books using a dedicated “Books” area in your WP Admin.
For each book, you can specify key information such as the title, release date, genre, pages, Goodreads links, purchase links, ISBN13/ASIN, and more. There’s also a dedicated field to upload an image of the book cover.
Then, you can display your book portfolio anywhere on your site using the plugin’s shortcode. Each book also gets its own dedicated detail page, which the plugin links to from the main book portfolio.
The Novelist plugin is 100% free, though the developer does sell some premium add-ons for connected functionality, such as creating an events calendar to display your upcoming author events.
If you made your website with WordPress.com, you might not need a separate WordPress portfolio plugin because you already get access to portfolio functionality.
To help you create a great-looking portfolio, WordPress.com adds two relevant features:
- You can enable a portfolio projects content type that lets you add and manage portfolio items from your WP Admin.
- You can display those portfolio items anywhere on your site using a few different options, including blocks, shortcodes, or your theme’s default design.
This can help you achieve similar functionality to many of the plugins above but without the need to install a separate WordPress portfolio plugin.
If you’re interested in using the WordPress.com portfolio functionality, here’s how it works…
1. Enable the Portfolio Projects Content Type
To get started, you’ll want to enable the Portfolio projects content type so that you can add and manage portfolio items from your WP Admin.
Here’s how to do this:
- Open your WP Admin for the site to which you want to add a portfolio.
- Go to Settings → Writing.
- Scroll down to the Content types setting.
- Enable the Portfolio projects toggle.
- Click Save settings to save your changes.
2. Add Your Portfolio Items
Once you’ve enabled the portfolio projects feature, you can start adding the individual items that you want to include in your portfolio.
Adding a portfolio item works a lot like adding a blog post, and you’ll use a similar interface to add portfolio content.
To get started, open your WP Admin and go to Portfolio → Add New.
If you don’t see this option in the menu sidebar, make sure that you saved your settings after enabling the Portfolio Projects feature in the previous step.
Now, you can use the editor to add your portfolio project.
Make sure to add a title for the project. Then, you can add the content using the editor. This could include an explanation of the work that you did, screenshots, videos, etc. You can use all of the editor blocks, so you’re free to make things as creative (or as simple) as you want.
In addition to the title and content, you’ll also want to use the Project sidebar to add a few important pieces of information:
- Featured Image – this image will usually display on your main portfolio list page (though you don’t need to display the image if you don’t want to).
- Project Types – you can add a category to your project – this works just like categories for blog posts.
- Project Tags – you can add more specific tags to your project – this works just like tags for blog posts.
Once you’re happy with everything, make sure to click the Publish button to make your project live (just like you would publish a blog post).
3. Display Your Portfolio Items
Once you’ve added some of your work via the previous step, you’re ready to display your portfolio items on the front end of your site.
To do this, you have three main options:
- Portfolio Page – WordPress.com automatically creates a dedicated Portfolio page that lists your most recent portfolio projects using your theme’s styles. By default, it will display using the same template as your blog listing page. If you’re happy with this design, all you need to do is link to this page.
- Query Loop block – you can use the Query Loop block to create your own custom design to list portfolio projects. Or, you can also use the Blog Posts block (though this doesn’t give you as much flexibility as the Query Loop block).
- Portfolio shortcode – you can use the Portfolio shortcode – [portfolio] – to embed your portfolio in any post or page. The shortcode also comes with lots of customization options to let you control how the embed looks, such as changing the number of columns.
For example, here’s how it might work to create a custom portfolio list with the Query Loop block…
First, you would add the Query Loop block and choose your starting point:
Then, in the Query Loop block’s settings, you would set the Post Type equal to Project:
From there, you can further customize your design by editing the Query Loop template and adding blocks for the portfolio content that you want to display.
You can also add filters to only display specific portfolio projects based on the Project Types or Project Tags that you’ve assigned to a portfolio item.
For more details on how this block works, you can check out the full Query Loop documentation page.
Create Your Own Portfolio Today
All of the WordPress portfolio plugins on this list can help you create a stylish portfolio of your work.
To pick the right one for your situation, you’ll want to think about the type of work that you want to display, as well as your preferred layout.
You’ll also want to consider any other relevant features that you need, such as frontend filters, if you plan to include a larger number of projects in your portfolio and want to help your potential clients more easily browse those projects.
As an alternative to using a WordPress portfolio plugin, you can also use the built-in WordPress.com portfolio projects feature.
One advantage of the built-in portfolio projects feature is that you can use it no matter which WordPress.com plan you’re using, whereas installing a separate portfolio plugin requires at least the WordPress.com Business plan.
If you haven’t launched your site yet, you can also check out our complete guide on how to make a portfolio website to learn how to get started.
It will take you through everything that you need to know about launching your own portfolio website with WordPress.com – no technical knowledge needed!
Get started today, and you’ll have a beautiful portfolio website in no time.
Want more tips? Get new post notifications emailed to you.
-
Il plugin WordPress WP Rocket ora ottimizza la metrica LCP Core Web Vitals
WP Rocket, il plug-in per le prestazioni della velocità delle pagine di WordPress, ha appena annunciato il rilascio di una nuova versione che aiuterà gli editori a ottimizzare per Largest Contentful Paint (LCP), un'importante metrica Core Web Vitals.
Pittura con contenuti di grandi dimensioni (LCP)
LCP è una metrica della velocità della pagina progettata per mostrare la velocità necessaria affinché un utente percepisca che la pagina viene caricata e letta per interagire. Questa metrica misura il tempo necessario affinché gli elementi di contenuto principali siano completamente caricati. Questo dà un'idea di quanto sia utilizzabile una pagina web. Più veloce è l'LCP, migliore sarà l'esperienza dell'utente.
WP Razzo 3.16
WP Rocket è un plug-in di memorizzazione nella cache che aiuta un sito a funzionare più velocemente. Il modo in cui generalmente funziona la memorizzazione nella cache delle pagine è che il sito Web memorizzerà le pagine Web e le risorse a cui si accede di frequente in modo che quando qualcuno visita la pagina il sito Web non debba recuperare i dati dal database, cosa che richiede tempo, ma invece servirà la pagina Web dal cache. Questo è estremamente importante quando un sito Web ha molti visitatori del sito perché ciò può utilizzare molte risorse del server per recuperare e creare più e più volte lo stesso sito Web per ogni visitatore.
L'ultima versione di WP Rocket (3.16) ora contiene l'ottimizzazione LCP automatica, il che significa che ottimizzerà gli elementi della pagina dal contenuto principale in modo che vengano serviti per primi, aumentando così i punteggi LCP e fornendo una migliore esperienza utente.
Poiché è automatico, non c'è davvero nulla con cui giocherellare o mettere a punto.
Secondo WP Rocket:
- “Ottimizzazione LCP automatica: Ottimizza il contenuto più grande, una metrica fondamentale per la velocità del sito Web, migliorando automaticamente i punteggi complessivi di PageSpeed.
- Gestione intelligente delle immagini Above-the-Fold: Rileva e assegna automaticamente la priorità alle immagini outside the fold critiche, caricandole immediatamente per migliorare l'esperienza utente e i parametri delle prestazioni.
Tutte le nuove funzionalità operano perfettamente in background, senza richiedere alcun intervento diretto da parte dell'utente. Dopo l'installazione o l'aggiornamento a WP Rocket 3.16, queste ottimizzazioni vengono abilitate automaticamente, sebbene le opzioni di personalizzazione rimangano accessibili per coloro che preferiscono il controllo manuale.
Leggi il comunicato ufficiale:
WP Rocket 3.16: miglioramento automatico del punteggio LCP e PageSpeed
Immagine in primo piano di Shutterstock/ICONMAN66
-
Molteplici vulnerabilità trovate nel plugin WordPress Forminator
Gli amministratori di WordPress che utilizzano il plug-in Forminator sui propri siti Web devono affrettarsi ad aggiornare i propri siti con l'ultima versione del plug-in. Questo perché nel plug-in Forminator esistevano numerose vulnerabilità che potevano consentire l'attivazione di arresti anomali del sito e caricamenti di file dannosi sui siti Web di destinazione.
Una delle tre vulnerabilità dei Forminator rappresentava una grave minaccia
Secondo un recente JPCERT/CC mettere in guardiaalmeno tre diverse vulnerabilità hanno crivellato il plugin WordPress Forminator. Lo sfruttamento di queste vulnerabilità potrebbe consentire caricamenti di file dannosi, accesso a informazioni archiviate e arresti anomali del sito.
Forminator è un plug-in dedicato alla creazione di moduli per siti WordPress. Facilita la creazione da parte degli utenti di vari moduli per diverse pagine Web, inclusi moduli di contatto, moduli di pagamento, moduli d'ordine, widget di feedback e altro ancora. IL pagina ufficiale del plugin attualmente vanta oltre 500.000 installazioni attive, indicando l'enorme numero di siti Web che potrebbero essere a rischio a causa di eventuali vulnerabilità nel plug-in.
Nello specifico, nel plugin esistevano le seguenti tre vulnerabilità.
- CVE-2024-28890 (CVSS 9.8): Una vulnerabilità di gravità critica che potrebbe consentire caricamenti di file senza restrizioni. Un malintenzionato potrebbe sfruttare la falla per caricare file dannosi sul server di destinazione, accedere a dati sensibili e persino alterare il plug-in per attivare la negazione del servizio (DoS).
- CVE-2024-31077 (CVSS 7.2): Un'altra vulnerabilità che potrebbe consentire attacchi DoS. Questa vulnerabilità SQL injection potrebbe consentire a un avversario di accedere o modificare le informazioni nel database di destinazione.
- CVE-2024-31857 (CVSS 6.1): Una vulnerabilità di cross-site scripting (XSS) che un utente malintenzionato potrebbe sfruttare per modificare il contenuto della pagina Web di destinazione e accedere alle informazioni dell'utente.
L'avviso riconosce il ricercatore di sicurezza Hibiki Moriyama di STNet Inc. per aver segnalato queste vulnerabilità.
Sebbene il CERT/CC non abbia menzionato nulla sui tentativi di sfruttamento attivi di nessuna di queste vulnerabilità, la minaccia persiste ancora. E, considerando la grave minaccia che queste vulnerabilità rappresentano, è fondamentale che tutti gli utenti di Forminator lo facciano patchare i loro siti al più presto con l'ultima versione del plugin (v.1.29.3).
Fateci sapere che ne pensate nei commenti.
-
15 Top Web Design Tools & Resources To Try in 2024 — SitePoint
Do you find the amount of available web design resources and tools overwhelming?
You’re not alone.
There’s a lot of noise out there, and much of what you read or hear about web design tools & resources is repetitive.
This list is designed to fix that problem. The really big names did not make the cut, as they have more than enough exposure.
What we did was to check out excellent free and premium web design tools and resources that you rarely hear about and settled on a listing of 15 web design tools & resources that can be divided into 5 categories:
- Tools for building websites and pages that include a very promising free AI website builder together with some excellent free and premium WordPress themes that will have everything you need.
- Tools for building ecommerce stores, including Shopify. As Shopify’s popularity is growing exponentially, we’ve included a first-rate Shopify theme. If WooCommerce is your thing, you’ll find several top selling WordPress themes in this list that have been developed for WooCommerce only.
- Tools for adding animations & special effects will help your website charm its visitors into buying whatever they are selling. Static and motionless pages can be good for page loading performance. But they rarely do a respectable job of converting visitors into clients.
- Tools that add popular website functionalities, and one of the most popular is booking. Clients across various industries want their website to be able to accept and manage bookings. Two easy to use tools that will do an excellent job are included.
- Resources for visually improving your website – the best way to differentiate comparable products or services is through visual elements. We have included unique illustrations and icons and a font identifier you can use to customize a website to year heart’s content.
And now for the best part: at least 50% of the following web design resources and tools are free for you to use.
What do most of all these Web Design Tools & Resources have in common?
- Most are free or have a free version. They save you money.
- They are of high quality. They are top tier web design tools and resources, both aesthetically and functionally.
- Your website projects will look better. Bland design is one of the top 5 reasons for which people are saying “maybe” to a product or service rather than buying it. These tools and resources can be used to make a so-so website or page appealing and exciting.
This sponsored article was created by our content partners, BAW Media. Thank you for supporting the partners who make SitePoint possible.
TL;DR: The Best White Label Booking Software for agencies and developers.
Click the video to see this plugin in action.
Trafft enables you to offer online appointment bookings, organize team schedules, accept payments, send reminders, and more. Its top feature is its White Label Option that enables you to reap the rewards when your clients see your branding when using the booking software.
There are a number of features you will quickly come to appreciate, and if you go with the White Label Option, your clients will experience as well, and thank you for it. They include ease of navigation and the depth of customization options. Trafft’s library of prebuilt websites also plays a significant role. The Divine Beauty and Spa pre-built website illustrates how to manage bookings for a range of different services.
Customer Rating: 5 stars on Capterra, 4.7 (Excellent) on Trustpilot.
Testimonial: Pros: “The simplicity of setting Trafft up is my favorite part. You don’t need to fumble with anything, it’s all very easy to set up and manage. It’s modern, very slick interface; love the dashboard, and virtually every feature is self-explained. They’ve done a fantastic job annotating things to make them easy to understand.”
Cons: “First, the inability to refund. This is a major issue. It’s been mentioned and requested for over a year, and they’ve not yet figured out a way to handle refunding. This absolutely needs to be addressed”.
Support Resources: Support manual, YouTube videos, email, social networks, and Customer Support via the Ticketing System
TL;DR: wpDataTables is the best WordPress plugin for businesses and individuals who want to create tables and charts.
Click the video to see this plugin in action.
Best known for its ability to enable users to easily create tables/charts under challenging circumstances, wpDataTables’ top feature is a relatively new feature – Multiple Database Connections. Each table can establish an independent connection to MySQL, MS SQL, or PostgreSQL databases and become a virtual data hub that ensures a seamless integration of data from disparate sources.
Tables created with this plugin become in essence dynamic portals to a network of diverse data resources.
You will quickly discover the power this plugin has to offer. Workflow is streamlined with its intuitive user interface, data management becomes much less complex, and the ability to handle complex data structures with finesse is a given with the separate database connections, 4 chart building engines, single cell shortcodes, etc.
Templates also play useful roles. The Monthly Summary Report-Temperature template is obviously weather related, but the layout can easily be applied to a wide range of uses.
Customer rating: 4.5/5 on WordPress.org
Testimonial: “wpDataTables has a user-friendly interface, many customization options and integrated very well with my WP sites. wpDataTables works well on my sites and very good support. wpDataTables support helped me with some customizations and supported me until it worked. Thanks to the team for providing such a great tool! This plugin I have been waiting for a long time.”
Support resources: Support Manual, YouTube videos, Facebook Community
TL;DR: Amelia is the best WordPress plugin for Agencies and services-based businesses in need of a beautiful and intuitive booking website.
Click the video to see this plugin in action.
The automated notifications system, favored by more than 70% of its users, is Amelia’s standout feature. Users can seamlessly confirm or reject appointments directly from their email and can make payments using the payment link.
This multilingual feature keeps you informed about the status of appointments or events, fostering efficient communication between customers and employees. The system offers custom notifications, allowing you to tailor alerts for specific services or events. Whether triggered by specific actions or scheduled alerts, our Notifications elevate the user experience, ensuring timely and hassle-free management of appointments and events.
Templates can help you set up websites that attract potential clients and make booking easier for established clients. Barbershop is a widely used example.
Amelia users quickly become attuned to its ease of navigation, user friendly design, transparent pricing, and depth of customization options.
Customer Rating: 4.8 on Capterra.
Testimonial: Pros: “I’ve been hunting for the best booking tools over the years as a WordPress developer and finally stopped after finding out about Amelia. I love how intuitive it is. It has such a clean, modern, & intuitive backend and frontend.”
Cons: “There are so many features and customizations that I feel a bit lost sometimes.”
Support resources: Support Manual, YouTube Videos, Discord Group
TL;DR: Uncode is the best multiuse WordPress and WooCommerce theme if you are in need of a go-to solution.
Click the video to see this multiuse theme in action.
Uncode users almost without exception point to the theme’s WooCommerce demo library as its top feature. Pick any demo and you will quickly note its exceptional attention to detail not to mention its inspirational qualities.
Which demo is the best one of all? That would be impossible to say, as it would depend on the needs of the individual Uncode user. Popularity is easier to address. The Creative Software demo can be customized to fit a variety of uses and is one of the five most widely used. What could you do with it?
As an Uncode user, you will quickly become aware of the substantial level of customization open to you, the value the demos and wireframes can provide, and the first-class customer support.
If you are a shop creator, you can put Uncode’s advanced WooCommerce features to effective use.
If you are a freelancer or represent an agency you can take advantage of Uncode’s advanced customization options to effectively address the needs of your clients.
Customer rating: 4.89/5
Testimonial: “This is the perfect purchase in my 10 years of experience as a web designer. Already have 3 licenses and will buy more.
I am using Uncode as the basis for all of my creations for clients. It is impressive coding, a fantastic look, and a reactive support team!”
Support: Support manual, YouTube videos, Facebook Group
TL;DR: Your top tool for generating and downloading full page websites using prompt commands only.
Click the video to see Mobirise AI usages in action.
Any feature that enables you to accomplish a lot by doing a little is a good one, and the Mobirise AI Website Builder’s top feature is the ability to create an awesome website, or a significant portion of one, with a single prompt.
The secret is its innovative use of AI. Give Mobirise the “specs” for your website, and it will transform your initial prompt into a full-fledged, content-rich website. You will still have to do some fine tuning to attain perfection, but AI does most of the work for you.
Mobirise AI’s extensive template library can help you get started. Instead of submitting an extensive list of requirements you can focus on customizing through the use of prompts.
AI not only saves you time, but ensures your content is engaging, is tailored to fit the site’s overall message, and is optimized for SEO.
You will quickly discover the builder’s ability to respond to prompts typed in any language, download the generated website as a ZIP file, and edit content without any need for code.
Testimonial: “WOW, this is not the first AI website builder that I have tried that claims to be AI… It is definitely the best!’
Support Resources: Support manual, User Forum, and YouTube Videos
TL;DR: LayerSlider is the best WordPress plugin if you are looking to boost your website with great visuals.
Click the video to see this plugin in action.
LayerSlider is the only WordPress plugin you’ll ever need to create anything from sliders and slideshows to popups and animated rich web content. LayerSlider is a versatile tool that boasts several remarkable features.
The most important of these is the seamless integration of spectacular animations, never-seen effects and graphics into your website, creating a live connection between the visitor and your content. An added advantage is the pre-made, downloadable professional templates that are not only visually stunning but also provide an excellent foundation. You can easily customize and fill them with your own content.
Among all of these features is LayerSlider’s scroll effect, which is certainly one of the most impressive effects and can be found in the newer templates. See what happens as you scroll down the LSVR Tech whole web page.
LayerSlider is designed to work at your fingertips, everything you need is there where it should be, and its highly customizable interface will make you feel right at home. LayerSlider can in fact be used on any website, irrespective of its content.
Client Feedback: “I have tried plenty of other slider plugins. Nothing compares.”
Support resources: Support Ticket System, response to bug reports and feedback via email, and answers to pre-purchase questions.
TL;DR: Slider Revolution is the best WordPress plugin if you are looking to create jaw-dropping animated sliders.
Click the video to see this plugin’s Wow effects in action.
Slider Revolution’s top feature is the ability it gives you to easily design Wow-inducing content sections, whether you do so on a home page, use it to highlight a special product, or anything else. In addition to creating your own designs you can borrow from other sources or your favorite content inventories.
At one time Slider Revolution limited its users to the simple creation of sliders. That’s no longer the case. With Slider Revolution in your toolkit, you can:
- create home pages that grab and hold a viewer’s attention.
- create eye-catching portfolios that refuse to be unseen.
- design jaw-dropping sections anywhere on any website page.
Imagine the fun you could have with this Spotlight Hero Header template.
Slider Revolution is tailored for web shops, small agencies, and individual web designers.
Customer Rating: 4.65/5 on Trustpilot
Testimonial: “Slider Revolution Responsive WordPress Plugin completely blew me away! Its functionality is top-notch offering seamless integration with my WordPress site. The array of beautifully designed templates offered made it effortless to handle and gave my website an instant professional uplift. Absolutely amazing product!”
Support: Support Manual and YouTube Videos
TL;DR: The most accurate font identifier available for free.
Click the video to see this font identifier in action.
This font identifier has many popular features. Its top feature is simply that it’s the best at what it has been designed to do: correctly, and accurately identify font images that have been submitted. It is in fact the only system that can claim to have a font identification accuracy of 90%+ irrespective of whether the font is free or commercially licensed.
Hits and misses are most often attributed to substandard image submittals.
How it works:
1. WhatFontis has a database of 990K+ free and commercially licensed fonts. This is nearly 5 times greater than the database size of its nearest competitor.
2. An efficient, AI-powered search engine provides you with quick answers to your queries.
3. In addition to identifying a submitted font image, WhatFontis you with up to 60 close relatives. The system also lets you know where you can download a free font or who to contact to purchase a licensed one.
Testimonial: “I use this site amongst others to match fonts for my clients’ websites. I just upgraded to show results from Google Fonts, and it worked perfectly. It saves a lot of time and searching around. Happy to recommend.”
Support: Font Identifier Forum
TL;DR: Essential Grid is the best WordPress Gallery Plugin if you want to capture visitors’ attention with breathtaking galleries.
Click the video to see this plugin in action.
Essential Grid’s top feature is its library of 50+ unique grid skins. That should not come as a surprise because that is what this #1 gallery plugin is all about.
Check out the Essential Grid gallery skins and you’ll eventually, in not immediately, come across a grid format you’ve never seen before.
Team Grid for WordPress, a new template, is designed to highlight team members ( the example highlights an exceptionally capable team). What attracts people to this grid is its straightforward layout and hover effect that offers a new take on what a gallery layout might look like.
Its users can tell you how much of a time saver Essential Grid is, and how effective it has been in helping them organize their content streams.
Customer rating: 4.7/5 on Trustpilot
Testimonial: “Essential Grid, similar to Slider Revolution has its very own interface and idiosyncrasies that can be frustrating when you are used to working within WordPress and whatever builder you are using.
Having said that, I am a self-taught idiot, and by no means a developer. The support you get with a license is spot-on, and as long as you go through the trouble of creating the ticket, support will hook you up where possible.”
Support: Support Manual, YouTube Videos
TL;DR: Blocksy is the best free WordPress theme for you in 2024 for building beautiful, lightweight websites.
Click the video to see this WordPress theme in action.
Ask its users what Blocksy’s top feature is, and you will end up with a list. It really comes down to what’s most important to you. Is it the Advanced WooCommerce integration capability? Maybe it’s Blocksy’s White Label module. The Custom Blocks Module has many fans, as does the way in which this theme supports Custom Post Types and Dynamic Data.
However you cut it or sort it out, there’s a lot to like. You’ll quickly discover that Blocksy is fast, simple to use, and has granular controls designed to give you access control over various aspects of your design or finished product.
Not to forget: Blocksy is free!
Blocksy’s stunning demos can serve as valuable website building aids. The Smart Home demo, one of the 5 most commonly used, will give you a head start if you have a smart home website solution in mind, although the layout lends itself to a variety of uses.
Customer rating: 5/5 on WordPress.org
Testimonial: “For anyone seeking a WordPress theme with both robust features and exceptional support, look no further than Blocksy. I was blown away by their fast, friendly, and proactive support team who even helped me with issues beyond the theme’s scope.”
Support: Support manual, YouTube videos, documentation section, and Facebook Group
TL;DR: Hongo is a creative conversion optimized Shopify theme with unique demos.
Click the video to see this multipurpose Shopify theme in action.
Hongo advertises design quality as its top feature. That alone may not tell you much, but when that quality is passed on to the Shopify-type websites you can create, the meaning becomes clear. Just as important is the money you save by using Hongo’s custom eCommerce features instead of Shopify apps, in addition to Hongo’s customization options.
You’ll quickly discover that Hongo is built for speed, with excellent performance on mobile, and even better on desktops.
Hongo has carefully crafted 19 demo stores (with more to come) that address a variety of popular eCommerce niches, together with 150+ sections, and 100+ pre-built pages to work with. The Décor demo could serve admirably as a starter site. Demos can also be mixed and matched.
Customer rating: 4.87/5
Testimonial: “I’ve been working on developing stores on Shopify for a year now. I have already worked with 14 themes, but HONGO theme is the best of them all. I like it very much! Design, variety of sections, speed, support. Now I recommend this theme to everyone and make new projects only on it!
Thank you for a great product.”
Support: Support Manual, YouTube Videos, and 150+ online articles
TL;DR: Litho is a creative, modern, highly customizable, responsive and multi-purpose Elementor WordPress theme.
Click the video to see this Elementor WordPress theme in action.
Litho’s top feature may well be its close ties with Elementor that gives it remarkable page building options and capabilities. Litho serves a variety of client types ranging from freelancers and artists, to shop owners, digital agencies, bloggers, and writers.
Startup companies can make excellent use of Litho’s capabilities, not only because of what the demos have to offer (they can be imported individually or en masse and mixed and matched. Home Branding Agency is one of the most popular demos. Its eye-catching yet straightforward layout.
In addition, you can customize most of the page items using Elementor like header, footer, mini header, archive page / post template, page title and promo popup.
Customer rating: 4.94/5
Testimonial: “I’m absolutely thrilled with Litho. Its flexibility and customization options allowed me to create a unique and visually stunning website that perfectly fits my vision. The remarkable customer support provided by the team is incredibly responsive, genuinely friendly, and exceptionally helpful. Their swift assistance reflects their dedication to ensuring a seamless user experience.”
Support: Support manual, YouTube videos, One to one support ticket system, and the Litho support portal
TL;DR: The best place for designers who are looking for top quality illustrations with terrific attention to detail.
Click the video to see this illustrations resource in action.
GetIllustrations’ top feature is three things in one; 21,500+ vector illustrations, free updates for one year, and new illustrations added every week. Once you get started, good things keep coming at you!
There are 40+ nicely arranged categories to select from, most of which have several hundred illustrations; a few have more than 1,000. The Fintech Illustrations pack for example caters to the financial technology sector. Each of its 160 illustration elements presented in delightful monochromatic pastel shades and a customizable accent color.
Testimonial: “Get Illustrations is tremendous. Their customer service is world-class, like their design. I love having the ability to work with them on adding to an existing kit, specific to what we need at Distro. I look forward to working with Ramy and their team far into the future.”
Support: vector stock illustrations are in .Ai .SVG .PNG and .Figma formats
TL;DR: XStore is the best WooCommerce theme if you are looking to build high-converting online stores.
Click the video to see this theme in action.
The XStore theme is well known for its selection of pre-built online stores. A relatively new feature has replaced the online store selection as XStore’s top feature, and that is the selection of sales booster features. XStore has the highest number of these features on the marketplace.
These features include Frequently Bought Together, a Free Shipping progress bar, a sticky ad to cart bar, Cross sells after “Add to Cart”, and more; each guaranteed to make shopping quicker and increase a store’s conversion rate.
XStore also features a Single Product Builder, an Archive Products Builder, a Checkout Builder, and a Cart Builder for shop owners.
You will find the XStore Control Panel and XStore Builders Panel easy to work with and the aforementioned Booster Sales will be fun to incorporate as well. The online stores (demos) are designed to get your project off to a rapid start. The Web Agency store is one of the most widely used.
Customer rating: 4.88/5
Testimonial: “I have to say that I have rarely seen such good support. Every concern is clarified down to the smallest detail. You don’t wait longer than 1-2 hours for an answer. That’s very good. The theme is geared towards stores and offers the most modern functions. All important aspects such as sales promotions, Elementor widgets etc. are available. I can only recommend XStore.”
Support: Support Manual, YouTube Videos
TL;DR: WoodMart is the best WooCommerce theme for your niche ecommerce designs.
Click the video to see this theme in action.
A glance at the WoodMart website is enough to make its top feature (its realism) jump right out at you. That feature is its realism, it’s invitation to start shopping, right now!
You’ll first have to put WoodMart to work building your store for you. Which should not take all that long once you have your content in place.
As you proceed, you will find plenty to like about this WordPress theme, including:
- the ease in layout customizing.
- the Theme Settings Search capability and Theme Settings performance optimization features.
- popular customer-centric features such as “Frequently Bought Together,” “Dynamic Discounts,” and the social integrations options.
WoodMart also offers a White Label option that is worth giving some serious thought to if you are a developer, while marketers will find the social integrations feature useful.
Picking out the most popular demo can be a challenge since so many of them enjoy plenty of usage. WoodMart’s Retail 2 is one of the most popular demos. You can easily see the possibilities it offers.
Customer rating: 4.93/5
Testimonial: “I already use WoodMart on more than 10 websites with my clients. Only compliments, I highly recommend!”
Support: Support Manual, YouTube Videos
Summary
Our goal was to create a list of lesser-known web design resources and tools of top quality that you can use to deliver:
- Website projects that persuade visitors through aesthetically superior design and visuals.
- Ecommerce stores that convert visitors into clients with the help of back-end theme features that were developed specifically for this.
- Website functionalities that are now in high demand – such as booking forms.
We believe that goal has been met and have provided you with key info, so you can make an informed decision to either try a tool or resource or to skip it.
Now, let’s take a quick final review of for what or for whom each product/resource is good for and what its standout feature is:
WordPress Plugin Summary Standout Feature Trafft The Best White Label Booking Software for agencies and developers Trafft’s White Label WpDataTables The best WordPress plugin for creating tables and charts. Multiple Database Connections Amelia The best WordPress plugin for beautiful and intuitive booking websites Multilingual Notifications system Uncode The best multiuse WordPress and WooCommerce theme with go-to solution for any project. The design of demos Mobirise AI Website Builder Generate full page websites using prompt commands only Prompt command LayerSlider The best WordPress plugin for making simple sliders. Seamless integration of spectacular animations Slider Revolution The best WordPress plugin for creating jaw-dropping animated sliders. WOW-effects for WordPress WhatFontIs The best free font identifier Identify any font from any image Essential Grid The best WordPress Gallery Plugin for businesses. 50+ unique grid skins Blocksy The best free WordPress theme in 2024 for building beautiful, lightweight websites. Advanced WooCommerce integration Hongo Shopify Hongo is a creative conversion optimized Shopify theme with unique demos. Brilliant design quality Litho Creative, modern, highly customizable, responsive and multi-purpose Elementor WordPress theme Remarkable page building options and capabilities GetIllustrations The best place for top quality illustrations with terrific attention to detail 21,500+ vector illustrations XStore The best WooCommerce theme for building high-converting online stores Sales Booster Woodmart The best WooCommerce theme for niche ecommerce design. Custom layouts builder -
WP Automatic WordPress plugin colpito da milioni di attacchi SQL injection
Gli hacker hanno iniziato a prendere di mira una vulnerabilità di gravità critica nel plug-in WP Automatic per WordPress per creare account utente con privilegi amministrativi e per installare backdoor per l'accesso a lungo termine.
Attualmente installato su oltre 30.000 siti Web, WP Automatic consente agli amministratori di automatizzare l'importazione di contenuti (ad esempio testo, immagini, video) da varie fonti online e la pubblicazione sul proprio sito WordPress.
La vulnerabilità sfruttata è identificata come CVE-2024-27956 e ha ricevuto un punteggio di gravità di 9,9/10.
È stato reso pubblico dai ricercatori di PatchStack servizio di mitigazione delle vulnerabilità il 13 marzo e descritto come un problema di SQL injection che influisce sulle versioni di WP Automatic precedenti alla 3.9.2.0.
Il problema risiede nel meccanismo di autenticazione utente del plugin, che può essere aggirato per inviare query SQL al database del sito. Gli hacker possono utilizzare query appositamente predisposte per creare account amministratore sul sito Web di destinazione.
Oltre 5,5 milioni di tentativi di attacco
Da quando PatchStack ha rivelato il problema di sicurezza, WPScan di Automattic ha osservato più di 5,5 milioni di attacchi che cercavano di sfruttare la vulnerabilità, la maggior parte dei quali registrati il 31 marzo.
WPScan segnala che dopo aver ottenuto l'accesso amministrativo al sito Web di destinazione, gli aggressori creano backdoor e offuscano il codice per renderlo più difficile da trovare.
“Una volta che un sito WordPress viene compromesso, gli aggressori garantiscono la longevità del loro accesso creando backdoor e offuscando il codice”, legge il rapporto di WPScan.
Per impedire ad altri hacker di compromettere il sito web sfruttando lo stesso problema ed evitare il rilevamento, gli hacker rinominano anche il file vulnerabile “csv.php”.
Una volta ottenuto il controllo del sito Web, l'autore della minaccia installa spesso plug-in aggiuntivi che consentono il caricamento di file e la modifica del codice.
WPScan fornisce una serie di indicatori di compromissione che possono aiutare gli amministratori a determinare se il loro sito Web è stato violato.
Gli amministratori possono verificare la presenza di segnali che indicano che gli hacker hanno preso il controllo del sito Web cercando la presenza di un account amministratore che inizia con “xtw” e file denominati web.php E indice.phpquali sono le backdoor piantate nella recente campagna.
Per mitigare il rischio di violazione, i ricercatori consigliano agli amministratori dei siti WordPress di aggiornare il plugin WP Automatic alla versione 3.92.1 o successiva.
WPScan consiglia inoltre ai proprietari di siti Web di creare frequentemente backup del proprio sito in modo da poter installare rapidamente copie pulite in caso di compromissione.
-
Convesio acquisisce la piattaforma di automazione del marketing WooCommerce Growmatik
“Growmatik è leader nell'automazione del marketing omnicanale per WooCommerce e Convesio è l'azienda ideale per portare avanti questa missione”, ha affermato Roozbeh Firoozmand, CEO di Growmatik.
NAPOLI, Florida, 17 maggio 2024 /Comunicato stampa 24-7/ — Convesiouna piattaforma di hosting WooCommerce ad alte prestazioni, è lieta di annunciare l'acquisizione di Growmatik, uno strumento di automazione del marketing all'avanguardia per WordPress e WooCommerce. Questa acquisizione segna un passo significativo nella strategia di Convesio volta ad espandere il proprio stack tecnologico e migliorare il proprio posizionamento sul mercato integrando funzionalità complete di automazione del marketing nella sua suite di servizi.
Growmatik è stata determinante nell'aiutare i propri clienti a migliorare il ROI e ridurre i costi di marketing attraverso la sua integrazione avanzata di dati di prodotto, cliente e marketing. In particolare, l'azienda è specializzata nella personalizzazione delle esperienze utente tramite e-mail, contenuti Web e pop-up basati su sofisticate analisi e segmentazione del comportamento degli utenti.
Growmatik ha alimentato oltre 2 miliardi di invii di e-mail per migliaia di aziende in tutto il mondo, vantando una solida architettura di prodotto che promette crescita e scalabilità sostanziali. I suoi strumenti sono progettati per aumentare il coinvolgimento aziendale, migliorare i tassi di conversione e fidelizzare i clienti attraverso campagne di marketing mirate e contenuti personalizzati.
Questa acquisizione strategica mira a migliorare le offerte di Convesio sfruttando le comprovate capacità di Growmatik per accelerare la crescita dell'eCommerce per i clienti Convesio.
“Growmatik è leader nell'automazione del marketing omnicanale per WooCommerce e Convesio è l'azienda ideale per portare avanti questa missione”, ha affermato Roozbeh Firoozmand, CEO di Artbees, creatori di Growmatik. “Sono entusiasta del futuro, poiché la tecnologia e la visione di Growmatik si allineano perfettamente con gli standard di Convesio in termini di ingegneria, sicurezza e scalabilità.
“Artbees è un team di imprenditori esperti di WordPress noti per le loro iniziative di successo, tra cui uno dei temi WordPress più popolari e un plugin WooCommerce ampiamente utilizzato”, ha affermato Tom Fanelli, CEO di Convesio. “Questo background rende Growmatik non solo un'acquisizione ma un miglioramento significativo del nostro stack tecnologico, consentendoci di offrire ai nostri clienti una soluzione di marketing più solida e onnicomprensiva.”
A proposito di Convesio
Convesio è una piattaforma di hosting scalabile fondata nel 2018, dedicata a fornire ad agenzie e imprese soluzioni di hosting WordPress scalabili e sicure. Sfruttando tecnologie e infrastrutture all'avanguardia, Convesio elimina le complessità dei tradizionali fornitori di servizi cloud, garantendo prestazioni, disponibilità e scalabilità senza pari per le aziende di e-commerce che cercano di scalare WooCommerce e ottenere una crescita notevole.
Per richieste da parte dei media, contattare:
Daryl Griffin
Direttore marketingE-mail: [email protected]
# # #
-
Gli hacker tentano di dirottare un importante plugin di WordPress che potrebbe consentire l'acquisizione del sito
Una vulnerabilità critica recentemente scoperta in un popolare plugin di WordPress viene attivamente abusata in natura, hanno detto i ricercatori, con gli hacker potenzialmente in grado di utilizzare la falla per prendere completamente il controllo del sito web di una vittima.
La società di sicurezza WordPress Patchstack ha scoperto per la prima volta una vulnerabilità SQL injection (SQLi) nel plugin WP‑Automatic a metà marzo 2024.
WP-Automatic è un plugin WordPress progettato per automatizzare il processo di importazione e pubblicazione di contenuti da varie fonti. Può acquisire contenuti da feed RSS, siti Web, Youtube canali e altro ancora, quindi creare e pubblicare automaticamente post.
Cinque milioni di attacchi
Secondo un avviso WPScan, i criminali informatici possono utilizzare la falla per “ottenere accesso non autorizzato a siti Web, creare account utente a livello di amministratore, caricare file dannosi e potenzialmente assumere il pieno controllo dei siti interessati”. Finora, la falla è stata utilizzata per creare nuovi account amministratore, che gli hacker avrebbero successivamente utilizzato per ulteriori attacchi (installazione di componenti aggiuntivi dannosi, esfiltrazione di dati sensibili e altro).
Gli è stato assegnato un punteggio di 9,9 (critico) ed è stato registrato come CVE-2024-27956. Si dice che tutte le versioni fino alla 3.9.2.0 siano vulnerabili. Finora sono stati registrati più di cinque milioni di tentativi di sfruttamento.
“Una volta che un sito WordPress viene compromesso, gli aggressori garantiscono la longevità del loro accesso creando backdoor e offuscando il codice”, ha affermato WPScan. “Per eludere il rilevamento e mantenere l'accesso, gli aggressori possono anche rinominare il file vulnerabile WP-Automatic, rendendo difficile per i proprietari di siti Web o gli strumenti di sicurezza identificare o bloccare il problema.”
Le notizie sugli hackerha anche affermato che la parte relativa alla ridenominazione dei file potrebbe anche essere un tentativo da parte degli hacker di impedire ad altri hacker di prendere il sopravvento.
WordPress è di gran lunga il più popolare costruttore di siti web piattaforma in circolazione oggi, che alimenta quasi la metà dell’intera Internet. Tuttavia, è considerato relativamente sicuro, con temi e plugin che rappresentano l’anello più debole. Si consiglia agli utenti del sito WordPress di installare solo i temi e i componenti aggiuntivi che intendono utilizzare e di mantenerli sempre aggiornati.
Altro da TechRadar Pro
