Cryptolocking WordPress Plugin Locks Up Blog Posts
A new type of malicious plugin has been spotted in the wild with the capability of targeting individual blog posts. Continue reading Cryptolocking WordPress Plugin Locks Up Blog Posts
Category Archives: wordpress
WordPress Plugin Flaws Exploited in Ongoing Malvertising Campaign
An ongoing malvertising campaign is exploiting WordPress plugin vulnerabilities to redirect website visitors to malicious pages. Continue reading WordPress Plugin Flaws Exploited in Ongoing Malvertising Campaign
How to defend against brute force attack on wp-login.php? [duplicate]
This question already has an answer here:
How to protect WordPress from brute-force attacks?
3 answers
Today our site is … Continue reading How to defend against brute force attack on wp-login.php? [duplicate]
Bluehost WordPress Site hacked multiple times FTP MMprobe php file
Anyone have experience and advice to locate the source and stop an ftp hack on my client’s Wordpress site hosted on BlueHost? The hackers were able to do the following:
Create multiple ftp accounts with usernames like ss-ee… Continue reading Bluehost WordPress Site hacked multiple times FTP MMprobe php file
What about privacy data on Subscribe WordPress and How to unsubscribe?
Another day I commented on wordpress blog and I could subscribe me for get new comments and answers from author and other users. Well, I receive, on my personal email, a message from wordpress to a Subscription Managementpage… Continue reading What about privacy data on Subscribe WordPress and How to unsubscribe?
Application News – Application Security Weekly #68
WordPress Plugin WP Statistics Patches XSS Flaw, Three RCEs in Android’s Media framework, Nine Best Practices For Integrating Application Security Testing Into DevOps, 6 Traits That Define DevSecOps, and much more! News Bugs, Breaches, and Mo… Continue reading Application News – Application Security Weekly #68
WordPress Plugin WP Statistics Patches XSS Flaw
A cross-site scripting vulnerability in WordPress plugin WP Statistics could have enabled full website takeover. Continue reading WordPress Plugin WP Statistics Patches XSS Flaw
Does the Loginizer WordPress plugin also limit XML-RPC-calls?
I learned about about XML-RPC and specifically XML-RPC in WordPress. Now, the safety of XML-RPC in WordPress this is disputed.
But given, that I would like to continue using XML-RPC, in the most save manner, I wonder about t… Continue reading Does the Loginizer WordPress plugin also limit XML-RPC-calls?
Understanding SQLMAP payload
I was participating in a CTF and there was a SQL Injection challenge. There is a Wordpress page with a vulnerable plugin parameter (let’s call the website https://vulnerable.com/), and the solution comes from leaking values from the databa… Continue reading Understanding SQLMAP payload
13 Reasons Why WordPress Hacks are Successful
In the attacker’s world, all vulnerabilities and potential exploits work toward the hacker’s advantage — not yours, not mine. This includes WordPress hacks. While living back east (over a decade ago), I was friends with several small … Continue reading 13 Reasons Why WordPress Hacks are Successful