WordPress sites are being backdoored with rogue admin users
A malvertising campaign has evolved to give hackers control of entire sites. Continue reading WordPress sites are being backdoored with rogue admin users
Category Archives: wordpress
WordPress Plugins Exploited in Ongoing Attack, Researchers Warn
Researchers warn users of several plugins to update as vulnerabilities are being actively exploited to redirect website visitor traffic. Continue reading WordPress Plugins Exploited in Ongoing Attack, Researchers Warn
Just another suspiciously looking php script [duplicate]
This question already has an answer here:
I found unknown PHP code on my server. How do I de-obfuscate the code?
2 answers
… Continue reading Just another suspiciously looking php script [duplicate]
How to prevent cross site scripting in wordpress?
I did source analyzer with third party services to my wordpress project. It found out that there are heaps of cross site scripting vulnerabilities. One of the example is like image below. How do I prevent the cross site scrip… Continue reading How to prevent cross site scripting in wordpress?
How Activity Logs Help WordPress Admins Better Manage Website Security
Managing a WordPress website can sap a lot of your time and energy, which otherwise you’d spend on managing your business.
If you’re looking to cut down on the hours, you spend troubleshooting WordPress technical and security problems, better managing… Continue reading How Activity Logs Help WordPress Admins Better Manage Website Security
PCI DSS SAQ A compliance with WooCommerce and 3rd party payment gateways – possible?
I am considering using Wordpress, WooCommerce, third party payment processor and different plugins for an ecommerce store.
I have trouble figuring out if it is possible to do all that and to be PCI DSS compliant and SAQ A el… Continue reading PCI DSS SAQ A compliance with WooCommerce and 3rd party payment gateways – possible?
Satoshi Nakamoto Renaissance Holdings’ website is WordPress? Is it safe? [on hold]
So, Satoshi Nakamoto, creator of Bitcoin has announced that he will supposedly be revealing his real identity. I find the fact that Satoshi’s company website is hosted on Wordpress to be endlessly amusing for some reason. I m… Continue reading Satoshi Nakamoto Renaissance Holdings’ website is WordPress? Is it safe? [on hold]
Reverse proxy isolation from insecure blog, are sessions vulnerable?
Hi I have a WebApp where security is important. E.g.
www.somewebapp.com
The app has a wordpress blog (hence not secure since wordpress). e.g.
www.somewebapp.com/blog
To protect the webapp from the insecure blog, the b… Continue reading Reverse proxy isolation from insecure blog, are sessions vulnerable?
SiteLock Extends Database Security Reach to MySQL
SiteLock this week extended the reach of its tool for finding and removing malware from databases to include the open source MySQL database. Previously, the SMART Database only supported websites built using the WordPress framework. Now the company’s … Continue reading SiteLock Extends Database Security Reach to MySQL
Cryptolocking WordPress Plugin Locks Up Blog Posts
A new type of malicious plugin has been spotted in the wild with the capability of targeting individual blog posts. Continue reading Cryptolocking WordPress Plugin Locks Up Blog Posts