The Logonizer login security plug-in was automatically updated to patch a SQL injection vulnerability. (more…)
Read more »
On April 21st, our Threat Intelligence team discovered a vulnerability in Site Kit by Google, a WordPress plugin installed on over 300,000 sites. This flaw allows any authenticated user, regardless of capability, to become a Google Search Console owner fo... (more…)
Read more »
Today, we’re announcing that Site Kit is available for everyone to install from the WordPress plugin directory. Site Kit is Google’s official WordPress plugin – it enables you to setup and configure key Google services, get insights on how people find and... (more…)
Read more »
It is possible to determine the version of WordPress Core that a site is running through a number of methods. The simplest is where in the default configuration WordPress reports the version in the Meta Generator Tag within the HTML of the page. Another l... (more…)
Read more »
Identifying, mitigating and analysis WordPress "Pingback" Reflective DDoS attacks on production frontend hosts... (more…)
Read more »
