June 25, 2024
Sin comentarios
Multiple WordPress plugins have been maliciously modified to include a backdoor making it possible to create administrator accounts in order to take control of the website.
Habitually, These new non-legitimate accounts are called “Options” or “PluginAuth” with the information leaked to a malicious IP address, Plugin-focused:
- Social Warfare 4.4.6.4 – 4.4.7.1 (Update with solution: 4.4.7.3)
- Blaze Widget 2.2.5 – 2.5.2
- Wrapper Link Element 1.0.2 – 1.0.3
- Contact Form 7 Multi-Step Addon 1.0.4 – 1.0.5
- Simply Show Hooks 1.2.1
It is recommended to update to the latest versions of such plugins to avoid exposure to potential attacks.
Fountain: TheHackerNews
More news
A cybercriminal manages to use AI to steal data from the Mexican Government
Read more »
Intec creates an AI that redefines the rules of the game in cybersecurity in the AI era.
Read more »
Una exfiltración de datos afecta a un proveedor de Adidas
Read more »
Se incrementan un 26% los incidentes de ciberseguridad
Read more »
Un ciberataque paraliza en Roma la Universidad La Sapienza
Read more »