News

Number of attacks on WordPress-websites through the vulnerability Social Warfare critically grew

Attacks on WordPress sites are passing as an avalanche, warn experts from Palo Alto Networks.

It is possible due to vulnerable plugin Social Warfare that now threatens nearly 40 000 websites.

Social Warfare contains XSS-vulnerability that can also lead to remote code performing.

“An attacker can use these vulnerabilities to run arbitrary PHP code and control the website and the server without authentication. The attackers may use the compromised sites to perform digital coin mining or host malicious exploit code,” – Palo Alto researchers wrote.

If intruders manage to gain control over attacked website, they inbuilt scripts of cryptocurrency mining to earn on visitors.

Also are common cases of malware advertising and usage of hacked website as a part of botnet.

Experts from Palo Alto Networks remind about availability of relevant patch that fixes CVE-2019-9978 vulnerability.

Unfortunately, owners of many resources still did not acknowledge that situation is serious and continue to ignore recommended update.

In March 2019, Social Warfare was removed from official library. This plugin allows WordPress-websites owners add on their resources bottoms of social networks that enable sharing materials on other platforms.

Source: www.scmagazine.com

Polina Lisovskaya

I works as a marketing manager for years now and loves searching for interesting topics for you

Recent Posts

Remove Securedjointmetwork.co.in Pop-up Ads

About Securedjointmetwork.co.in Securedjointmetwork.co.in pop-ups can not launch out of the blue. If you have clicked…

16 hours ago

Remove Lecuminum.com Pop-up Ads

About Lecuminum.com Lecuminum.com pop-ups can not expose out of nowhere. If you have actually clicked…

19 hours ago

Remove Webtmci24.top Pop-up Ads

About Webtmci24.top Webtmci24.top pop-ups can not launch out of the blue. If you have actually…

19 hours ago

Remove Techlottads.top Pop-up Ads

About Techlottads.top Techlottads.top pop-ups can not introduce out of nowhere. If you have clicked some…

20 hours ago

Remove Streamcompletelysophisticatedthe-file.top Pop-up Ads

About Streamcompletelysophisticatedthe-file.top Streamcompletelysophisticatedthe-file.top pop-ups can not introduce out of nowhere. If you have clicked some…

20 hours ago

Remove Womadds.club Pop-up Ads

About Womadds.club Womadds.club pop-ups can not expose out of the blue. If you have actually…

20 hours ago