Switch to the dark mode that's kinder on your eyes at night time.

Switch to the light mode that's kinder on your eyes at day time.

Switch to the dark mode that's kinder on your eyes at night time.

Switch to the light mode that's kinder on your eyes at day time.

Malware using the REST API for Remote Code Execution (jetpack.com)

by WPNEWS team August 28, 2021, 11:54 Comments

This week, Jetpack Scan flagged the license file of a premium extension. It turned out to be injected malware using the REST API for remote code execution.

REST API

More From: Security

Astro + WPGraphQL for more secure WordPress sites
WordPress powers over 43% of the web, and that makes it a prime target for hackers and bots. But […]
Patchstack Tracks 328% More Security Bugs Reported in WordPress Plugins in 2022 (wptavern.com)
Patchstack, a WordPress security maintenance and management tool, has published its “State of WordPress Security” whitepaper for 2022, tracking a few key metrics on publicly reported vu…
All In One SEO Pack Vulnerabilities Impacting 3 Million Sites Patched (www.wordfence.com)
On January 26, 2023, the Wordfence Team responsibly disclosed two vulnerabilities in All In One SEO Pack, a WordPress plugin installed on over 3 Million sites which provides search engine[…]
GoDaddy says a multi-year breach hijacked customer websites and accounts (arstechnica.com)
Three breaches over as many years all carried out by the same threat actor.
Multiple Authenticated SQL Injection Fixed In WP Statistics Plugin Version (patchstack.com)
If you’re a WP Statistics user, please update the plugin to at least version13.2.11. Patchstack Pro and Business users are protected from the vulnerability. You can also sign up the[…]
Massive Campaign Uses Hacked WordPress Sites as Platform for Black Hat Ad Network (blog.sucuri.net)
Since late December, our team has been tracking a new spike in WordPress website infections related to the following malicious domain: track[.]violetlovelines[.]comPublicWWW results show over 5,600 websites impacted by this[…]

Astro + WPGraphQL for more secure WordPress sites

Patchstack Tracks 328% More Security Bugs Reported in WordPress Plugins in 2022 (wptavern.com)

All In One SEO Pack Vulnerabilities Impacting 3 Million Sites Patched (www.wordfence.com)

GoDaddy says a multi-year breach hijacked customer websites and accounts (arstechnica.com)

Multiple Authenticated SQL Injection Fixed In WP Statistics Plugin Version (patchstack.com)

Massive Campaign Uses Hacked WordPress Sites as Platform for Black Hat Ad Network (blog.sucuri.net)

How to scan your WordPress instances for Security Issues using WPScan (blog.wpsec.com)

Malware using the REST API for Remote Code Execution (jetpack.com)

Leave a Reply Cancel reply

WordPress' Secret World of JavaScript (www.briancoords.com)

Miscellaneous REST API improvements in WordPress 6.1 (make.wordpress.org)

Astro + WPGraphQL for more secure WordPress sites

Patchstack Tracks 328% More Security Bugs Reported in WordPress Plugins in 2022 (wptavern.com)

All In One SEO Pack Vulnerabilities Impacting 3 Million Sites Patched (www.wordfence.com)

GoDaddy says a multi-year breach hijacked customer websites and accounts (arstechnica.com)

Multiple Authenticated SQL Injection Fixed In WP Statistics Plugin Version (patchstack.com)

Massive Campaign Uses Hacked WordPress Sites as Platform for Black Hat Ad Network (blog.sucuri.net)

How to Upload Files to Dropbox from WordPress Dropbox Forms (cdn.formidableforms.com)

Proposal for Adding Badges and Other ‘Learner Achievements’ to WordPress Profiles (wptavern.com)

Leave a Reply Cancel reply

Log In

Sign In

Forgot password?

Your password reset link appears to be invalid or expired.

Log in

Privacy Policy

Add to Collection

No Collections