WordPress Plugin Bug Opens 100K Websites to Compromise

Legions of website visitors could be infected with drive-by malware, among other issues, thanks to a CSRF bug in Real-Time Search and Replace. Continue reading WordPress Plugin Bug Opens 100K Websites to Compromise

Are the developers of WordPress avoiding security by obscurity or there some reason to expose plugin and login names?

Tools like wpscan are out there in the open, which make the scanning of any WordPress website plugins without any authentication and receive sensitive data like wp-admin login names (which usually contain PII), plugins used, etc.

Is this… Continue reading Are the developers of WordPress avoiding security by obscurity or there some reason to expose plugin and login names?

WordPress and Apache Struts weaponized vulnerabilities on the rise

Vulnerabilities in leading web and application frameworks, if exploited, can have devastating effects like the Equifax breach which affected 147 million people, according to RiskSense. Among the report’s key findings, total framework vulnerabilities in… Continue reading WordPress and Apache Struts weaponized vulnerabilities on the rise