WordPress m4shell Hack [duplicate]
This question already has an answer here:
How do I deal with a compromised server?
6 answers
I could not find any similar… Continue reading WordPress m4shell Hack [duplicate]
Category Archives: wordpress
Was my password copied?
I work locally with a wordpress site. When I logged in, it looked like the password was highlighted. It went very fast. Half a second maybe. You might not be able to copy passwords that way ..? But what I find strange is that… Continue reading Was my password copied?
wordpress remote user authentication
I am having multiple wordpress sites with multiple users working on those.
Therefore I would like to centeralize the user management, by having one authentication server, storing the username, password and website this user… Continue reading wordpress remote user authentication
Salesforce Ventures invested $300M in Automattic while Salesforce was building a CMS
In September, Salesforce Ventures, the venture of arm of Salesforce, announced a hefty $300 million investment in Automattic, the company behind WordPress, the ubiquitous content management system (CMS). At the same time, the company was putting the finishing touches on Salesforce CMS, an in-house project it released last week. The question is, why did it […] Continue reading Salesforce Ventures invested $300M in Automattic while Salesforce was building a CMS
WordPress sites hit by malvertising
An old piece of malware is storming the WordPress community, enabling its perpetrators to take control of sites and inject code of their choosing. Continue reading WordPress sites hit by malvertising
Sextortion scammers are hijacking blogs – and victims are paying up
Sextortion scammers have started hijacking poorly managed or defunct blogs to expand an increasingly profitable business. Continue reading Sextortion scammers are hijacking blogs – and victims are paying up
Alerts and warnings for WordPress theme. What are the risks associated?
I have bought a Wordpress theme and scanned its files on www.themecheck.info. The results show 3 critical alerts and 9 warnings:
Alerts:
Presence of iframes : iframes are sometimes used to load unwanted
adverts and malicio… Continue reading Alerts and warnings for WordPress theme. What are the risks associated?
user_roles getting deleted from wp_options table in wordpress
I would like some advice on how to troubleshoot a problem on Wordpress/Apache/PHP/MySQL
I am looking at the following:
select *
from wp_options opt
where option_name like ‘%wp_user_roles%’
order by option_name
Yesterday, fo… Continue reading user_roles getting deleted from wp_options table in wordpress
WordPress site request to /wp-includes/Text/Diff/ yields open directory listing
Someone requested my site’s (Wordpress/Apache) ‘includes’ directory:
122.51.0.219 – – [03/Oct/2019:18:36:15] “GET /wp-includes/Text/Diff/ HTTP/1.1” 200 736 “-” “-”
Noticing the 200 response, I hit the URL myself and found … Continue reading WordPress site request to /wp-includes/Text/Diff/ yields open directory listing
WordPress sites hacked through defunct Rich Reviews plugin
An estimated 16,000 websites are believed to be running a vulnerable and no-longer-maintained WordPress plugin that can be exploited to display pop-up ads and redirect visitors to webpages containing porn, scams, and–worst of all–malware designed to in… Continue reading WordPress sites hacked through defunct Rich Reviews plugin