Collaborate Disseminate
Today, I got
A total of 2 possible successful probes were detected (the following URLs
contain strings that match one or more of a listing of strings that
indicate a possible exploit):
/wp-content/plugins/wptf-image-… Continue reading Finding the worpress installation logwatch is referring to [migrated]
Yet another WordPress plugin vulnerability has put thousands of websites at risk. Continue reading Users Urged to Disable WordPress Plugin After Unpatched Flaw Disclosed
If you own an eCommerce website built on WordPress and powered by WooCommerce plugin, then beware of a new, unpatched vulnerability that has been made public and could allow attackers to compromise your online store.
A WordPress security company—calle… Continue reading Critical Unpatched Flaw Disclosed in WordPress WooCommerce Extension
If you are one of the many who are using WordPress as a content management system (CMS) for your website, it’s important to be aware of SQL injection threats that could take down your business. SQL injection is a common threat, as SQL is the mos… Continue reading How to Protect WordPress Websites from SQL Injection
I found that in the past, the WordPress version 2.0.6 and earlier was vulnerable. The remote host fails to properly sanitize input to the tb_id parameter of the wp-trackback.php script before using it in database queries.
I … Continue reading Can the WordPress `wp-trackback.php` file introduce any security vulnerabilities?
Hackers have been found exploiting a pair of critical security vulnerabilities in one of the popular social media sharing plugins to take control over WordPress websites that are still running a vulnerable version of the plugin.
The vulnerable plugin … Continue reading Hackers Actively Exploiting Widely-Used Social Share Plugin for WordPress
More and more attacks taking advantage of a XSS and RCE bug in the popular plugin have cropped up in the wild. Continue reading Exploits for Social Warfare WordPress Plugin Reach Critical Mass
Removing wp-config-sample.php file from the root of the WordPress application can be considered as a good security practice or it does not make any difference for security?
Yet another Wordpress plugin, Yellow Pencil Visual Theme Customizer, is being exploited in the wild after two software vulnerabilities were discovered. Continue reading WordPress Yellow Pencil Plugin Flaws Actively Exploited
A vulnerability in the Yuzo Related Posts WordPress plugin, used by 60,000 websites, is being exploited in the wild. Continue reading WordPress Urges Users to Uninstall Yuzo Plugin After Flaw Exploited