On a daily basis at Sucuri, we hear things like: “My host takes care of my website security.”Magic Mic colors May Vary (Sold Individually) by Toysmith “I have never been hacked, so why should I care?” Or here’s a personal favorite: “I’ll take care of it if (when) it happens.” Let’s be honest,…
Read More about Who is Responsible for the Security of Your Website?
During a routine research audits for our Sucuri Firewall, we discovered an Unauthenticated Persistent Cross-Site Scripting (XSS) affecting 60,000+ users of the WP Live Chat Support WordPress plugin.St. Patrick's Dayldr6150 50x80inch LALADecor Valentines Day Plush Microfiber Fabric Throw Blanket Lightweight Warm Couch Bed Blankets 50x80 inch colorful Hearts and Sweet Candy Current State…
Read More about Persistent Cross-site Scripting in WP Live Chat Support Plugin
Give is a WordPress plugin which allows users to setup a donation page on a website.ETbotu 4CH 2.4G High Speed Racing RC Boat RTF 24km h Remote Control Toys Red It currently has 60k installs. During a recent audit of the plugin, we found…
Read More about WordPress Plugin Give – Stored XSS for Donors
Classic Game Collection Metal Chess Set with Deluxe Wood Board and Storage 2.5 KingThe Ultimate member plugin version 2.0.45 and lower is affected by multiple vulnerabilities, among them is a critical vulnerability allowing malicious users to read and delete your wp-config.php file,Pink Duvet Cover Set,Queen Size,Cute Girl on Ladder Hanging a Star in the Night Sky with Half Moon Cartoon Picture,Decorative 3 Piece Bedding Set with 2 Pillow Sham,Best Gift For Girls Women,Yellow Bl which…
Read More about Multiple Vulnerabilities in the WordPress Ultimate Member Plugin
WGKUMMQN Ladies Vintage Fringe Backpack Tote Imitation Leather Casual Backpack Travel Backpack Teen Small School BagReferral programs and affiliate marketing opportunities can be found on many web-based company sites, however, often they’re overlooked. Prettyia Christmas Wedding Beautiful Gift Exquisite Craftsmanship 18inch BJD SD Boy Bridegroom Doll in Suit Clothes shoes SetCommonly people consider these programs as something that they, “should leave to the…
Sucuri is partnering with GoDaddy Pro to make the internet more secure, Laliva Walkera UP02 Upgrade Tool USB Receiver Upgrade Spare Parts UP02 Adapter for Walkera FPV Remote Controller DEVO 7 DEVO7 Radio (color 1set)one website professional at a time. Developers, designers, agencies, and freelancers now have an exclusive avenue to level…
During regular research audits for our Sucuri Firewall (WAF), Recife Rivière Hard Case 1 Pen Chocolatwe discovered a Cross Site Request Forgery (CSRF) leading to a persistent Cross Site Scripting vulnerability affecting 70,000+ users of the…
Mele And Company Mele & Co. Kerri Girl'S Musical Ballerina Jewelry Box
Mr. Potato Head Marvel SpiderSpud SuitcaseAlthough the majority of sites we work on are powered by PHP, we still have clients whose sites use other programming languages. The other day we cleaned an ASP site…
Attackers commonly rely on backdoors to easily gain reentry and maintain control over a website. They also use PHP functions to further deepen the level of their backdoors. A good…Beautyshoppingstore Ice Cream Cat Jumbo Squishies Slow Rising Stress Relief Galaxy Squishies Toy Soft Kawaii Scented Kids Toys Collection for Kids Adults (pink)
We have recently published posts regarding banking malware and some of the ways it uses compromised websites to infect victim’s devices (smartphones, computers, POS terminals). Women of Dynamite Vampirella (Black & White Diamond Eye Edition) StatueNow let us look into…
Due to the poor handling of a vulnerability disclosure, a new attack vector has appeared for the WooCommerce Checkout Manager WordPress plugin and is affecting over 60,000 sites.Trademark Fine Art Pin Up Collage If you…
Read More about Insufficient Privilege Validation in WooCommerce Checkout Manager
