Restricting access to NinjaFirewall (WP Edition) settings.
Starting from version 1.8.1, it is possible to restrict access to NinjaFirewall (WP+/WP Edition) menu and settings. Note: Restrictions apply to single sites only, not to…
Tag: WordPress
Fake wordpress-update.com site used to distribute malware via malicious plugins.
In recent days, we have worked on several infected WordPress websites that all had the particularity of having the same malicious plugin installed: Hackers gained access…
WordPress brute-force attack detection plugins comparison (2015 edition).
Following our 2013 benchmarks, we received quite a lot of requests to perform new ones and, this time, to include a category of plugins that wasn’t…
Critical vulnerability in Swift Security Hide WordPress Firewall plugin leads to phishing attack.
This is a very interesting spear phishing attack case that we had to deal with this week. Spear phishing are attempts directed at a specific individual,…
Jetpack Protect: IP spoofing and improper data validation allow security feature bypass.
Since version 3.4, the popular Jetpack by WordPress.com plugin (15+ million downloads / 1+ million active installs) includes Jetpack Protect, a module “to protect your Jetpack-connected…