• Skip to primary navigation
  • Skip to content
  • Skip to primary sidebar
  • Skip to footer

Sucuri Blog

Website Security News

  • Products
    • Website Security Platform
    • Website Firewall (WAF)
    • Enterprise Website Security
    • Multisite Solutions
  • Features
    • Detection
    • Protection
    • Performance
    • Response
    • Backups
  • Partners
    • Agency Solutions
    • Partners
    • Referral Program
    • Ecommerce
  • Resources
    • Guides
    • Webinars
    • Infographics
    • SiteCheck
    • Reports
    • Email Courses
  • Immediate Help
  • Login

Blacklist Warnings for Users of the Stream-Video-Player WordPress Plugin

December 27, 2011David Dede

0
SHARES
FacebookTwitterSubscribe

If you are using the plugin stream-video-player, it might be a good idea to disable this plugin for now.

The plugin loads a Flash player from “http://rod.gs/_SVP/5.7.1896/player.swf?ver=1.3.2”, a domain (rod.gs) which is currently blacklisted by Google, so anyone visiting your site will get the cross-site warning message. Since it is a popular plugin (with more than 100k downloads), this could be affecting quite a few websites.

This is the message users would see:

www.site.com contains content from rod.gs, a site known to distribute malware. Your computer might catch a virus if you visit this site.

Google has found malicious software may be installed onto your computer if you proceed. If you’ve visited this site in the past or you trust this site, it’s possible that it has just recently been compromised by a hacker. You should not proceed, and perhaps try again tomorrow or go somewhere else.

We have already notified rod.gs that we found malware on the site. For more about the problems found on rod.gs, visit the Google Safe Browsing diagnostic page.

Getting blacklisted stinks, but it’s worse when your site isn’t the source.

Unless you want your users to get a warning message every time they visit your site, it is a good idea to disable this plugin.


Is your website infected with malware and need professional assistance? Get protect with Sucuri Security.

0
SHARES
FacebookTwitterSubscribe

Categories: Vulnerability Disclosure, Website Malware Infections, WordPress SecurityTags: Malware Updates, Website Blacklist

About David Dede

David is a Security Researcher at Sucuri. He spends most of his time dissecting vulnerabilities and security issues. You won't find him on Twitter because he is paranoid about privacy.

Reader Interactions

Comments

  1. Geustus!

    December 28, 2011

    Noticed the same thing , I sucks! There is no streaming plugin that I have found wich can do the same things. If JW-player took Rodrigos advices it would have been the best thing. Isn’t there another way to work around this problem? Using another flash-player but with the same plugin?

    • Vertago1

      May 9, 2012

      If you download the wordpress plugin from http://rodrigopolo.com/about/wp-stream-video and install it then your site will host the player.swf and you will not get the blacklist warning.

  2. Rodrigo Polo

    December 28, 2011

    Download and use the stand alone version as recommended
    http://rodrigopolo.com/about/wp-stream-video

    Google has some serious issues:
    http://bit.ly/sdZ4LG

  3. Faust Principe

    January 3, 2012

    there’s also a new malware affecting jetpack, shareaholic and google analyticator plugins, these plugins are from the wordpress trusted repository.

  4. 2013 dekorasyon

    March 7, 2012

    2012 dekorasyon
    ev dekorasyon
    dekorasyon

    using another flash-player but with the same plugin?

Primary Sidebar

Socialize With Sucuri

We're actively engaged across multiple platforms. Follow us and let's connect!

  • Facebook
  • Twitter
  • LinkedIn
  • YouTube
  • Instagram
  • RSS Feed

WordPress Security Course

The Anatomy of Website Malware Webinar

How to Clean a Hacked Website Guide

WordPress Security Guide

Join Over 20,000 Subscribers!

Footer

Products

  • Website Firewall
  • Website AntiVirus
  • Website Backups
  • WordPress Security
  • Enterprise Services

Solutions

  • DDos Protection
  • Malware Detection
  • Malware Removal
  • Malware Prevention
  • Blacklist Removal

Support

  • Blog
  • Knowledge Base
  • SiteCheck
  • Research Labs
  • FAQ

Company

  • About
  • Media
  • Events
  • Employment
  • Contact
  • Testimonials
  • Facebook
  • Twitter
  • LinkedIn
  • Instagram

Customer Login

Sucuri Home

  • Terms of Use
  • Privacy Policy
  • Frequently Asked Questions

© 2021 Sucuri Inc. All rights reserved

Sucuri Cookie Policy
See our policy>>

Our website uses cookies, which help us to improve our site and enables us to deliver the best possible service and customer experience.