This entry was posted in Vulnerabilities, Wordfence, WordPress Security on July 05, 2018 by Matt Barry 4 Replies
Today WordPress released version 4.9.7, a security release which addresses two separate arbitrary file deletion vulnerabilities requiring Author privileges. Some details can be found on the WordPress.org blog. The first arbitrary file deletion vulnerability was disclosed June 26, 2018 on the RIPS Tech blog with no official patch to WordPress in place. We released a …
Read More
This entry was posted in Wordfence, WordPress Security on December 28, 2017 by Matt Barry 7 Replies
Last week, we reported a massive upsurge in brute force login attempts following the leak of a database of 1.4 billion clear text credentials. No one had seen 14% of the exposed username/password pairs before, making this a ripe opportunity for hackers to attempt to break into WordPress sites. Historically, brute force attacks targeting WordPress …
Read More
This entry was posted in WordPress Security on December 19, 2017 by Matt Barry 105 Replies
The WordPress repository recently removed the plugin Captcha over what initially appeared to be a trademark issue with the current author using “WordPress” [Editors note: the original page has been removed, we’re now linking to a screen shot.] in their brand name. Whenever the WordPress repository removes a plugin with a large user base, we check …
Read More
