For your WordPress protection, be informed about the latest vulnerabilities in WP plugins: AddToAny Share Buttons Conditional Host Header Injection reported by Paul Dannewitz. It’s possible to inject a custom Host-Header, that will be used for building the link, which is going to be shared on Social Media platforms when…
WP Security
Your freshly installed, brand new WP is discovered faster than you imagine. Amazingly, even before you are informed. Find out how in this post. New WordPress installs are the main focus for smart hackers. The race to take over a fresh WP reached new epic heights. We live in a…
If you are unable to receive WordPress emails, then there is a chance that your server is hacked to send spam emails to all of us. You should not feel bad about spamming your friends and loved ones because by current statistics 90% of all e-mail is SPAM. There are…
For your WordPress protection, be informed about the latest vulnerabilities in WP plugins: WP Statistics SQL injection reported by Sucuri. Exploit allows to create an admin-level user and sign in to your WordPress as an admin. Cross-Site Scripting (XSS) reported by Dewhurst Security. Exploit allows attackers to compromise a WordPress…
If you are unable to login to your WordPress site, then there is a chance that hackers may have compromised your admin account from WordPress. There are some common tell-tale signs that should help you figure out if your WordPress site is compromised. Don’t panic, but this is serious! In…
If you look at your analytic reports and see a sudden and constantly dropping trend in your website traffic, then it could be a sign that your WordPress site is hacked. There are some common tell-tale signs that should help you figure out if your WordPress site is compromised. No…
Back in 2013, a web publishing company, Interconnect/IT, released a handy tool for finding and replacing text in a website’s database. This tool, a stand-alone file published as “searchreplacedb2.php”, includes built-in WordPress compatibility that makes working with WordPress databases a breeze. Unfortunately, since the first public version, it did not…
Malicious redirects are very common in compromised websites. Attackers DO TAKE ADVANTAGE of the site resources to promote spam, distribute other malware, backdoors, and perform all kinds of malicious activities. Sucuri, during an Incident Response investigation, found that malicious redirects were coming from a JavaScript loading via the website enmask.com,…
With so many bad news of vulnerabilities and hackers attempting to compromise WordPress sites regularly, you start wondering if WordPress is really secure at all. You can stop wondering because WordPress is secure! The popularity numbers create this negative effect. Today, WordPress powers 27% of all sites on the web…
