Automatic Website Traffic RSS

Backdoor Found in WordPress Plugin With More Than 200,000 Installations

For the past two and a half months, a WordPress plugin named Display Widgets has been used to install a backdoor on WordPress sites across the Internet. The backdoor code was found between Display ... read more

Rogue WordPress Plugin Allowed Spam Injection - Threatpost

A rogue version of the WordPress plugin called “Display Widget” allowed third-parties to injecting spam advertising content into victims’ sites. read more

Malicious plugin installed backdoor on 200,000 WordPress websites

A very persistent malicious actor added a backdoor to a WordPress plugin called Display Widgets that installed backdoors on possibly 200,000 websites since June 21. The hacker used the open-source ... read more

Plugin flaw leaves up to 200,000 WordPress sites at risk of attack

A popular WordPress theme plugin that’s installed on some 200,000 websites has been found to contain a serious vulnerability that, if abused, could allow remote attackers to wipe the sites and ... read more

Pirated themes and plugins are the most widespread threat to WordPress ...

Of these 206,000 sites, 154,928 were infected with a version of the WP-VCD malware, a WordPress malware strain known for its use of pirated/nulled themes for distribution. read more