WordPress brute-force attack detection plugins comparison (2015 edition).
Following our 2013 benchmarks, we received quite a lot of requests to perform new ones and, this time, to include a category of plugins that wasn’t…
Tag: WordPress
Critical vulnerability in Swift Security Hide WordPress Firewall plugin leads to phishing attack.
This is a very interesting spear phishing attack case that we had to deal with this week. Spear phishing are attempts directed at a specific individual,…
Jetpack Protect: IP spoofing and improper data validation allow security feature bypass.
Since version 3.4, the popular Jetpack by WordPress.com plugin (15+ million downloads / 1+ million active installs) includes Jetpack Protect, a module “to protect your Jetpack-connected…
NinjaFirewall WP/WP+ introduces automatic updates for security rules.
Starting from WP v1.4 and WP+ v1.2, NinjaFirewall introduces a new feature: It offers the possibility to automatically update the firewall security rules. Each time a new vulnerability…
Many popular WordPress security plugins vulnerable to IP spoofing.
A WordPress user who was facing a small brute-force attack asked us for help. He was using a popular security plugin but, this time, his plugin…