Last week in the President’s cyber security op-ed in the Wall Street Journal he implored Americans to move beyond simple passwords and to enable two factor authentication or cellphone sign-in. One of the things we monitor at Wordfence is the number of brute force attacks on WordPress websites. Brute force attacks are password guessing attacks, where an attacker tries to sign in … Read More
3 Severe Plugin Vulnerabilities Fixed in the Last 24 Hours
The following three plugins contain severe vulnerabilities that have all been fixed within the past 24 hours. Details of these vulnerabilities have been released to the public so they are likely already being exploited. If you use any of these plugins, upgrade immediately. Please share with the larger WordPress community. WooCommerce Store Toolkit Plugin (A plugin for WooCommerce made by Visser Labs, not … Read More
Using Siteground hosting to always force redirect WordPress to https / SSL
I’m just trying out Siteground as host. I only signed up yesterday, so I cannot really say whether or nor they will be something that I can recommend. However, so far, so good. One thing that I really like is the fact that they offer secure connections (https / SSL) with one click thanks to Let’s Encrypt, which I wrote … Read More
WordPress Security Infection
Another WordPress Security Issue. We should all know by now that ALL technology is vulnerable to attack. Code is written by humans and humans make mistakes. Also, technology moves on, and what might have been a ‘perfect’ piece of code six months ago could now be susceptible to a new attack vector. WordPress security has taken a bashing in the … Read More
- Page 2 of 2
- 1
- 2