wordpress security

How to Use WordPress User Roles for Improved WordPress Security

| | wordpress security, wordpress tutorial, wordpress user roles
Learn more about WordPress user roles and what capabilities users have when assigned to a specific WordPress user role. With WordPress user roles, the WordPress owner can have control of what the ...
WP White Security
WordPress Malware Disables Security Plugins to Avoid Detection

WordPress Malware Disables Security Plugins to Avoid Detection

| | Black Hat Tactics, Hacked Websites, Obfuscation, Sucuri Labs, Website Malware Infections, Website Security, WordPress Plugins and Themes, wordpress security
An alarm or monitoring system is a great tool that can be used to improve the security of a home or website, but what if an attacker can easily disable it? I’ve ...
Sucuri Blog

Why a strong password policy is so important for your WordPress website

| | password policies, Password Security, strong passwords, wordpress password, wordpress security
If you’ve been managing a WordPress site for a while, you may be wondering why a strong password policy is so important. Surely, users are aware that they need to use strong ...
WP White Security
Reflected XSS in WordPress Plugin Admin Pages

Reflected XSS in WordPress Plugin Admin Pages

| | Black Hat Tactics, Hacked Websites, Sucuri Labs, Website Security, WordPress Plugins and Themes, wordpress security, XSS
The administrative dashboard in WordPress is a pretty safe place: Only elevated users can access it. Exploiting a plugin’s admin panel would serve very little purpose here — an administrator already has ...
Sucuri Blog
Critical Vulnerability in File Manager Plugin Affecting 700k WordPress Websites

Critical Vulnerability in File Manager Plugin Affecting 700k WordPress Websites

| | Malware Cleanup, Secure Development, Vulnerability Disclosure, WordPress Plugins and Themes, wordpress security
Yesterday, the WordPress plugin File Manager was updated, fixing a critical vulnerability allowing any website visitor to gain complete access to the website. Users of our WAF were never vulnerable to this ...
Sucuri Blog
The “Best” WordPress Malware Scanner Is Not What You Think

The “Best” WordPress Malware Scanner Is Not What You Think

| | Malware Scan, WordPress malware scan, WordPress Malware Scanning, wordpress security
Are you: Worried that your WordPress site has been hacked? Looking for the best WordPress malware scanner online? Not sure of what malware scanner plugin to use? Good. You’re in the right ...
MalCare

Vulnerabilities Digest: July 2020

| | Black Hat Tactics, Ecommerce Security, Joomla Security, Website Backdoor, Website Malware Infections, Website Security, WordPress Plugins and Themes, wordpress security
Relevant Plugins and Vulnerabilities: PluginVulnerabilityPatched VersionInstalls Asset CleanUp: Page Speed Authenticated XSS 1.4.6.7 80000 Quiz And Survey Master Authenticated Stored XSS 7.0.0 30000 Comments – wpDiscuz 7.0.0 – Arbitrary File Upload 7.0.5 ...
Sucuri Blog
How to Create a Strong Password

Reverse String WooCommerce WordPress Credit Card Swiper

| | Black Hat Tactics, Ecommerce Security, Hacked Websites, Sucuri Labs, Website Backdoor, Website Malware Infections, Website Security, WordPress Plugins and Themes, wordpress security
As 2020 continues to be the worst year in almost anybody’s lifetime, allow me to take this opportunity to stoke the fires of your existential dread even further. As a sequel to ...
Sucuri Blog

Fake WordPress Plugin SiteSpeed Serves Malicious Ads & Backdoors

| | Black Hat Tactics, Conditional Malware, Hacked Websites, malvertising, Website Security, WordPress Plugins and Themes, wordpress security
Fake WordPress plugins appear to be trending as an effective way of establishing a foothold on compromised websites. During a recent investigation, we discovered a fake component which was masquerading as a ...
Sucuri Blog
Pirated WordPress Plugins Bundled with Backdoors

Pirated WordPress Plugins Bundled with Backdoors

| | Black Hat Tactics, Ecommerce Security, Hacked Websites, Magento Security, Website Backdoor, Website Malware Infections, Website Security, WordPress Plugins and Themes, wordpress security
One widespread belief among webmasters is that attackers typically only compromise websites in a couple of ways: by exploiting vulnerabilities or stealing login credentials. Although these are certainly two of the more ...
Sucuri Blog
Load more