it-daily.net

Hacker manipulieren populäre WordPress-Plugins

Ein Angreifer hat JavaScript-Dateien von drei WordPress-Plugins manipuliert, um unbemerkt administrative Hintertüren auf Webseiten zu installieren.

Over 1 million WordPress sites at risk after popular plugins hacked

Three popular plugins served malicious JavaScript through a compromised CDN.
GitHub

The Async JavaScript plugin for WordPress is vulnerable...

This score calculates overall vulnerability severity from 0 to 10 and is based on the Common Vulnerability Scoring System (CVSS).

WordPress Plugins: Supply Chain Attack Puts 1.2 Million Sites at Risk

In a supply chain attack, attackers install backdoors through the WordPress plugins OptinMonster, TrustPulse, and PushEngage.
GitHub

The CSS & JavaScript Toolbox plugin for WordPress is...

This score calculates overall vulnerability severity from 0 to 10 and is based on the Common Vulnerability Scoring System (CVSS).
All About Security

WordPress-Sicherheit: Veraltete PHP-Versionen im Fokus

Viele WordPress-Seiten laufen mit veralteten PHP-Versionen. Ein Blick auf Risiken, Plugins und die ...