Securing WordPress with a Web Application Firewall: NinjaFirewall (WP Edition).
In this article we will see how to provide a very high level of protection to a WordPress blog with a web application firewall.
NinjaScanner: A powerful antivirus scanner for WordPress.
NinjaScanner is a lightweight, fast and powerful antivirus scanner for WordPress which includes many features to help you scan your blog for malware and virus.
An introduction to NinjaFirewall filtering engine.
Starting from version 3.0, NinjaFirewall, our Web Application Firewall for PHP (Pro and Pro+ Edition) and WordPress (WP and WP+ Edition), includes a new powerful filtering engine.
Multiple vulnerabilities in Sliced Invoices plugin.
The WordPress Sliced Invoices plugin, which has 6,000+ active installations, was prone to multiple vulnerabilities in version 3.8.2 and below.
Zero-day vulnerability exploited in WordPress Lara Google Analytics plugin.
The WordPress Lara Google Analytics plugin, which has 20,000+ active installations, was prone to an authenticated stored XSS vulnerability.
Stored XSS vulnerability in WordPress Download Plugins and Themes from Dashboard plugin.
The WordPress Download Plugins and Themes from Dashboard plugin, which has 10,000+ active installations, was prone to an unauthenticated stored XSS vulnerability in version 1.5.0 and below.
Vulnerability in the WordPress Delucks SEO plugin actively exploited.
The WordPress DELUCKS SEO plugin version 2.1.7 and below is prone to a vulnerability that is actively exploited by hackers.
Multiple vulnerabilities in WordPress Motors Car Dealer & Classified Ads plugin.
The WordPress Motors Car Dealer & Classified Ads plugin, which has 10,000+ active installations, was prone to multiple vulnerabilities in version 1.4.0 and below.
Unauthenticated options import vulnerability in WordPress Ultimate FAQ plugin.
The WordPress Ultimate FAQ plugin, which has 30,000+ active installations, was prone to an unauthenticated options import vulnerability in version 1.8.24 and below.
Critical vulnerability fixed in WordPress LifterLMS plugin.
The WordPress LifterLMS plugin , which has 9,000+ active installations, fixed a critical vulnerability in version 3.34.5 and earlier.
Settings change vulnerability in WordPress Search Exclude plugin.
The WordPress Search Exclude plugin, which has 30,000+ active installations, was prone to two vulnerabilities that could allow any user to change its settings.
Unauthenticated options change vulnerability in WordPress WP Private Content Plus plugin.
The WordPress WP Private Content Plus (9,000+ active installations) was prone to an unauthenticated options change vulnerability.
Critical vulnerability in WordPress Bold Page Builder plugin currently being exploited.
A critical vulnerability in the WordPress Bold Page Builder plugin, which has 20,000+ active installations, has been exploited for the past 24 hours.