Search Results for: security

On Tuesday, Sucuri reported a large-scale concerted attack injecting malware into WordPress sites, causing them to break. Upon further investigation, Sucuri researchers discovered that the exploitation is happening through a recent vulnerability found in the popular WordPress plugin MailPoet. In Sucuri’s blog post, Daniel Cid, CTO and Founder of Sucuri, stated, To be clear, the MailPoet vulnerability is the entry point, it doesn’t mean your website has to have it enabled or that you have it on the website; if it resides on the server, in a neighboring website, it can still affect your website. Even sites within the same […]

Earlier today, Sucuri reported a malware infection targeting WordPress sites! The announcement indicates: The last few days has brought about a massive influx of broken WordPress websites. What makes [this infection] so unique is that the malicious payload is being blindly injected which is causing websites to break. The malware targets WordPress sites through vulnerabilities such as weak admin passwords and outdated plugins. According to Sucuri, upon infiltration the infector PHP corrupts WordPress core files, as well as theme and plugin files—leaving PHP errors displayed in the place of content throughout the infected site. Sucuri is continuing to investigate and will provide details as […]