Groovy Web Hosts

https://www.wordfence.com/blog/2019/08/malicious-wordpress-redirect-campaign-attacking-several-plugins/

Malicious WordPress Redirect Campaign Attacking Several Plugins Over the past few weeks, our Threat Intelligence team has been tracking an active attack campaign targeting a selection of new and old WordPress plugin vulnerabilities. These attacks seek to maliciously redirect traffic from victims’ sites to a number of potentially harmful locations. Each of the ...

If you a Wordpress based website you need to know this.

Three Plugins Backdoored in Supply Chain Attack In the last two weeks, the WordPress.org repository has closed three plugins because they contained content-injection backdoors. “Closing” a plugin means that it is no longer available for download from the repository, and will not show up in WordPress.org search results. Each of them had been p...

You have a Wordpress website?

Backdoor in Captcha Plugin Affects 300K WordPress Sites The WordPress repository recently removed the plugin Captcha over what initially appeared to be a trademark issue with the current author using “WordPress” in their brand name. Whenever the WordPress repository removes a plugin with a large user base, we check to see if it was possibly due to so...

A quick roundup of the most important current vulnerabilities we’re tracking and that you should be aware of:

The popular Pods content development framework for WordPress has a XSS and CSRF vulnerability. This was fixed in version 2.5 which was released on 30 December. Please upgrade immediately. (plugin is popular with over 200,000 downloads)
The cformsII plugin suffers from a remote code ex*****on vulnerability via unauthorized file upload. Please upgrade immediately to version 14.8 which contains a fix if you’re using this plugin. (plugin has approximately 20,000 downloads)
The Banner Effect Header plugin has a XSS and CSRF vulnerability . This has been fixed in version 1.2.7 so upgrade if you’re using this plugin. (plugin has approximately 20,000 downloads)

Please upgrade immediately if you are using any of these plugins.