NoCrackingZone | Tag

Botnet blasts WordPress sites with configuration download attacks

A million sites attacked by 20,000 different computers.

A popular GDPR compliance WordPress plugin vendor has patched a flaw that rendered both site visitors and admins vulnerable to XSS attacks.

An old piece of malware is storming the WordPress community, enabling its perpetrators to take control of sites and inject code of their choosing.

If you’re a WordPress admin using a plug-in called Rich Reviews, you’ll want to uninstall it. Now.

A malvertising campaign has evolved to give hackers control of entire sites.

Hackers have been spotted targeting websites running unpatched versions of the WordPress plugin Abandoned Cart for WooCommerce.

Attackers have infected 20,000 WordPress sites by brute-forcing administrator usernames and passwords.

There’s no obvious executable payload in the attack but the attackers may be building a collection of websites and biding their time.