Case Study: Analyzing a WordPress Attack – Dissecting the webr00t cgi shell – Part I
Tony Perez November 1st started like any other day on the web. Billions of requests were being shot virtually between servers in safe and not so safe…
Browsing Category
WordPress Security
680 posts
Cleaning Up Your WordPress Site with the Free Sucuri Plugin
Daniel Cid Update 9/9/16: We released a new guide to cleaning a hacked WordPress site with our plugin. If your site has been recently hacked and you…
Sucuri CloudProxy WAF Plugin for WordPress
If you are using our CloudProxy WAF to protect your WordPress websites, we highly recommend that you also install our new CloudProxy plugin for WordPress.…
WordPress Database Table and wp_head Injections
There are multiple places where a malware injection can be hidden on a web site. On WordPress, for example, it can be hidden inside the…
WordPress 3.6.1 Released – Includes Security Fixes
Dre Armeda The WordPress team just pushed out a new version of WordPress. WordPress 3.6.1 is a maintenance release that includes some security bug fixes. Straight from…
Free Sucuri WordPress Plugin Gets New Features
We just released some major updates to our Free WordPress plugin that we recommend all WordPress users check out. Before the update, the plugin was…
New WordPress and Joomla Updates Available
David Dede If you are a WordPress or Joomla user, you better start updating your sites now. Joomla 2.5.14 Joomla 2.5.14 was released containing some critical security…
Dissecting a WordPress Brute Force Attack
Update: Brute force protection now available: http://cloudproxy.sucuri.net/brute-force-protection Over the past few months there has been a lot of discussion about WordPress Brute Force attacks. With…
WordPress 3.5.2 Security and Maintenance Release
The WordPress team just pushed out a new version of WordPress (3.5.2) that has some security bugs fixed. Straight from their release post, these are…
W3 Total Cache and WP Super Cache Vulnerability Being Targeted in the Wild
As if on queue, almost 7 days since we released the post about the latest W3TC and WP Super Cache remote command execution vulnerability, we…
Update WP Super Cache and W3TC Immediately – Remote Code Execution Vulnerability Disclosed
Shame on us for not catching this a month ago when it was first reported, but it seems that two of the biggest caching plugins…