Security | JournalXtra

Shhhh!!!! WordPress, Don’t Shout About your Break-in Then

Just in case you missed it, because I did, WordPress.org had a security breech this week. Several plugins were updated by a hacker (or hackers) who installed backdoor exploits into AddThis, WPTouch and W3 Total Cache that may have compromised self-hosted WordPress websites. The official statement posted by Matt Mullenweg (founding developer of WordPress) at wordpress.org on the 21st July, explains: "Earlier today the WordPress team noticed suspicious commits to several popular plugins (AddThis, WPtouch, and W3 Total Cache) containing cleverly disguised backdoors. We determined the commits … [Read more...]

Security Alert: WordPress Multi Site Hacker

Please be aware that the IP addresses listed below are being used to hack into WordPress Multi Sites. The person or bot behind the hacks adds a user to the site's admin then changes the network's setting to permit site and user registrations. One of my mostly up to date and secure WordPress MS blogs was recently hacked. I advise all WordPress MS users to update their sites and to block the following IP addresses from accessing them: 173.208.43.154 173.208.43.57 173.234.59.245 173.234.232.113 The IPs may be blocked by adding the following lines to your .htaccess file: order … [Read more...]

Shhhh!!!! WordPress, Don’t Shout About your Break-in Then

Security Alert: WordPress Multi Site Hacker

Invite Friends to ‘JournalXtra’

Buy me lunch!

Subscribe to JournalXtra

Categories