Collaborate Disseminate
I had a custom plugin for WordPress where I also had a plugin settings page with some tabs, each tab showing by tab parameter, and also had none on the URL.
My plugin has two different plugin settings pages for administrators and non-admin… Continue reading how to prevent url custom parameters xss attack in WordPress
Github is struggling to keep up with a malware campaign that’s a new twist on typosquatting. The play is straightforward: Clone popular repositories, add malware, and advertise the forks as …read more Continue reading This Week in Security: Forksquatting, RustDesk, and M&Ms
If sharing your content with AI firms is such a great thing for the publishers of blogs, you have to wonder why Automattic feels the need to enable it by default rather than insisting they opt-out – surely if it’s such a “win”, blog owners would be kee… Continue reading Act now to stop WordPress and Tumblr selling your content to AI firms
The vulnerability carries a CVSS severity score of 9.8/10 and affects web sites running the Ultimate Member WordPress membership plugin.
The post Critical Flaw in Popular ‘Ultimate Member’ WordPress Plugin appeared first on SecurityWeek.
Continue reading Critical Flaw in Popular ‘Ultimate Member’ WordPress Plugin
I have my own WordPress site (a small blog). Today I noticed that someone has left a comment on one of the posts and it is awaiting approval. The problem is that in the post (and on the site in general) I have disabled the block for leavin… Continue reading A suspicious comment that shouldn’t exist
Attackers are exploiting a recent remote code execution flaw in the Bricks Builder WordPress plugin to deploy malware.
The post Websites Hacked via Vulnerability in Bricks Builder WordPress Plugin appeared first on SecurityWeek.
Continue reading Websites Hacked via Vulnerability in Bricks Builder WordPress Plugin
We have a WordPress form that collects data on what marketing source (UTM) the user came from and upon submission, sends that UTM data to a 3rd party. Recently, a client asked me to have a web session to remember this session data for up t… Continue reading Can I set session time to 10 days without risking security issues?
This week Jonathan Bennett and Doc Searls talk with Tony Zeoli about Netmix and the Radio Station WordPress plugin. The story starts with the Netmix startup, one of the first …read more Continue reading FLOSS Weekly Episode 768: Open Source Radio
I am looking to move about 500 WordPress sites from their respective individual VMs to a single server for efficiency and cost savings .. That said —
On that single server I will have separated installs for each site. They will have the… Continue reading Best way to serve multiple WorPress sites — Single server shared hosting
I am looking to move about 500 WordPress sites from their respective individual VMs to a single server for efficiency and cost savings .. That said —
On that single server I will have separated installs for each site. They will have the… Continue reading Best way to serve multiple WorPress sites — Single server shared hosting