Collaborate Disseminate
Yesterday I got a report asking us to check some wordpress website because the person’s antivirus blocked said web.
I ran the Sucuri Site Check and it indeed detects malware:
“Known javascript malware: malware.injection?39”
<!–codes… Continue reading Sucuri detects malware on wordpress but I can’t find the malicious code
Researchers are warning of flaws in two WordPress plugins – Slick Popup and WP Database Backup – including one that remains unpatched. Continue reading WordPress Plugin Has Unpatched Privilege Escalation Flaw, Warn Researchers
This week, Microsoft brings hardware-based isolation to Chrome & Firefox, the US border’s license plate scanning technology hacked, Crooks leverage WordPress and Joomla sites for malicious redirects, the Chinese military wants to replace … Continue reading Joomla, BlueKeep, & Chinese OS – Hack Naked News #220
New .htaccess injector threat on Joomla and WordPress websites redirects to malicious websites. Continue reading Joomla and WordPress Found Harboring Malicious Redirect Code
In sum, they tried 10 different commands. The site is ran on Wordpress, but has a security plugin that, “blocked a page visit to your site.” I’m curious as to what they were trying to go after though. Also not sure why most… Continue reading Got warnings last night from a SQL injection attack – What were they trying to do?
I’ve tried to download a local copy of our website to play about with some minor front-end tweaks and my anti-virus flagged and prevented the download.
I used a plugin to scan WordPress and it flagged a file with this code:
… Continue reading WordPress Suspicious:PHP Help [on hold]
Researchers have uncovered another serious bug in WP Live Chat that could lead to the mass compromise of websites. Continue reading WordPress plugin sees second serious security bug in six weeks
I try to Scan MR robot machine with wpscan — url 192.168.0.5 — wp-content-dir wp-login — force — passwords sorted.dic -U Elliot and it doesn’t show me anything
A cross-site scripting flaw in a popular WordPress plugin enables an unauthenticated attacker to insert JavaScript payloads into impacted websites. Continue reading WordPress WP Live Chat Support Plugin Fixes XSS Flaw
The top 5 mistakes that create field days for hackers, WordPress 5.2 brings new security features, a discontinued Insulin pump with security a security flaw in high demand, and how to communicate privately in the age of digital policing! Paul’… Continue reading Security News – Paul’s Security Weekly #603