Collaborate Disseminate
A popular GDPR compliance WordPress plugin vendor has patched a flaw that rendered both site visitors and admins vulnerable to XSS attacks. Continue reading Cookie-nabbing app could have served users side helping of XSS
Researchers are urging users of the GDPR Cookie Consent WordPress plugin to update as soon as possible. Continue reading Critical WordPress Plugin Bug Afflicts 700K Sites
Developers behind WordPress plugin Code Snippets have issued a patch for the high-severity flaw. Continue reading 200K WordPress Sites Vulnerable to Plugin Flaw
Palo Alto Networks’ Unit 42 researchers observed a variant of the wormlike botnet that adds scanner technology to brute-force Web authentication. Continue reading New Muhstik Botnet Attacks Target Tomato Routers
Researchers have discovered bad authentication bypass vulnerabilities affecting two WordPress plugins which should be patched as soon as possible. Continue reading Update now! Popular WordPress plugins have password bypass flaws
Authentication bypass bugs in WordPress plugins InfiniteWP Client and WP Time Capsule leave hundreds of thousands of sites open to attack. Continue reading Critical WordPress Bug Leaves 320,000 Sites Open to Attack
I have a shared hosting on hostgator with around wordpress based websites. Out of them 4 stopped working with message as error establishing database connection. On checking the wp-config i found the Db connection details were changed for … Continue reading WordPress wp-config file seems hacked and changed to DB_NAME and DB_USER asadmin_drr and DB_HOST as 46.21.253.40 [duplicate]
One flaw found in WordPress plugins Ultimate Addons for Beaver Builder and Ultimate Addons for Elementor is actively being exploited. Continue reading Critical Bug in WordPress Plugins Open Sites to Hacker Takeovers
Attention WordPress users!
Your website could easily get hacked if you are using “Ultimate Addons for Beaver Builder,” or “Ultimate Addons for Elementor” and haven’t recently updated them to the latest available versions.
Security researchers have di… Continue reading Flaw in Elementor and Beaver Addons Let Anyone Hack WordPress Sites
I have noticed our website, which is Wordpress based, gets frequent daily requests from other sites where the user agent is Wordpress and the other site is obviously an already hacked Wordpress installation.
In these entries… Continue reading How to identify malicious WordPress user agents