Hosted.com warns outdated WordPress plugins raise security risks

Hosted.com says neglected WordPress plugins can open sites to malware, data theft, crashes, and other failures. The company is pointing customers to update tools, staging, patching, and simple security settings to lower the risk.

Why it matters: - Outdated WordPress plugins can leave known vulnerabilities unpatched, making websites easier for attackers to exploit. - The failures can go beyond security and trigger broken pages, slow load times, lost functionality, and reputation damage for online businesses. - A compromised site can face unauthorized access, malware infections, spam redirects, altered files, data theft, or a full crash.

What happened: - Hosted.com released guidance on the security risks tied to outdated WordPress plugins. - The company said regular plugin maintenance can reduce exposure to vulnerabilities, performance issues, and preventable breaches. - Wayne Diamond, CEO of Hosted.com, said outdated plugins are a security risk because they are common, visible to attackers, and often preventable. - Diamond said Hosted.com WordPress Hosting is designed to support maintenance with smart update tools, PHP version settings, staging environments, and patching.

The details: - WordPress plugins add features such as contact forms, ecommerce, analytics, caching, SEO tools, and security. - Problems often start when sites keep plugins active after updates, patches, or support have expired. - Risks also rise when plugins are poorly coded, unsupported, or downloaded from untrustworthy sources. - Some plugins request excessive permissions, which can allow unauthorized changes. - Conflicts with WordPress core software, themes, or other plugins can cause layout problems, missing features, or slower pages. - Hosted.com WordPress Hosting includes Smart Update, which automatically applies the latest plugin updates and compares website pages after the process finishes. - The page comparison feature lets customers check for visible changes or breaks after updates. - The service includes staging environments so changes and plugin updates can be tested on an offline copy before going live. - Hosted.com uses Patchman to apply security patches to outdated WordPress core software versions. - The company also offers a 1-Click WordPress Security feature that applies essential security settings without advanced technical knowledge. - Hosted.com said that feature is meant to support businesses, freelancers, and startups. - The company said inactive, outdated, unsupported, or too many plugins can increase risk when they are not checked regularly.

Between the lines: - Hosted.com is framing plugin security as both a technical issue and a business continuity issue. - The message also positions hosting features as a practical workaround for site owners who may not have in-house WordPress expertise. - The emphasis on staging and automated checks suggests the company wants customers to update faster without sacrificing site stability.

What's next: - Hosted.com is encouraging site owners to keep plugins updated, test changes before applying them, confirm developer support, and download only from trusted sources. - The company said regular updates, testing, and security best practices can avoid many of the risks tied to outdated plugins. - Hosted.com said its WordPress Hosting services are designed to reduce preventable issues while preserving plugin functionality.