Updating a plugin or WordPress core is the real fix. Virtual patching is a temporary shield: the Hub sends a signed rule so a known-bad request shape is blocked or logged before you can update.

Rules are narrow (path plus a marker). They are not a substitute for updates, backups, or good hosting. Linked Basic sites do not get Pro packs. A local or own site that is not linked still runs the built-in seed.

What virtual patching means.