BleepingComputer

New Linux malware uses 30 plugin exploits to backdoor WordPress sites

A previously unknown Linux malware has been exploiting 30 vulnerabilities in multiple outdated WordPress plugins and themes to inject malicious JavaScript. According to a report by antivirus vendor Dr ...

Until a site left with unupdated plugins becomes a stepping stone: What you need to know if you use WordPress, the entry points for vulnerabilities, and the verification s…

When I began the investigation, I found a large amount of unfamiliar access logs on the web server. It wasn't just the ...
Wired

WordPress.com Gets a New Face and Joins the JavaScript Age

The popular blogging site WordPress.com unveiled a new admin interface today for managing blogs, posting content, and reading other people's sites. If you're a regular user, you'll notice a new look ...
ZDNet

Zero-day in popular jQuery plugin actively exploited for at least three years

For at least three years, hackers have abused a zero-day in one of the most popular jQuery plugins to plant web shells and take over vulnerable web servers, ZDNet has learned. The vulnerability ...