Imunify360 has done it again with cutting edge protection.
Drupal has recently patched a critical remote code execution exploit SA-CORE-2018-002/CVE-2018-7600. This vulnerability may result in Drupal sites to be completely compromised.
Imunify360 protects against this vulnerability using built-in Web Application Firewall (WAF) as well as the intelligent botnet protection. Their team has pushed out updates where they improved rules and performance, and decreased false positive rate. They have added a rule CVE-2018-7600 to our databases to detect and block suspicious requests. We always recommend updating the vulnerable software, but we are happy to secure your sites until you have a chance to do so.
Please note:- Imunify360 is only on cPanel Hosting not Cloud SSD plans, so you are still at risk on SSD Cloud,
According to the Drupal Security Team, this is a highly critical (score 21/25) issue affects Drupal 8, 7, and 6 sites. More information on this vulnerability and updates can be found at this Drupal Advisory: https://www.drupal.org/sa-core-2018-002.
