Automatic Website Traffic RSS

Hackers abuse WordPress MU-Plugins to hide malicious code

Hackers are utilizing the WordPress mu-plugins ("Must-Use Plugins") directory to stealthily run malicious code on every page while evading detection. read more

Thousands of WordPress sites targeted with malicious plugin backdoor attacks

Security researchers found JavaScript code ... It deploys four backdoors. One installs a fake plugin named “Ultra SEO Processor” that can execute commands remotely, one injects malicious ... read more