Here, we’ll explain the security risks posed by various files left sitting in your WordPress directory.
Tag: WordPress plugin Page 1/15
We will explain a type of backdoor—one that lacks a main malware component—which has been running rampant on WordPress recently (and for which we have confirmed a large number of infections).
If an unfamiliar administrator has been added to WordPress, we’ll explain how to determine whether that administrator is unauthorized and what steps to take.
Here, we’ll explain how to prepare for the era when AI starts attacking WordPress.
Here’s how to handle situations where your WordPress access logs contain a large number of “unfamiliar URLs” or “login page” entries.
We will explain the practical workflow—from the public disclosure of a WordPress plugin’s CVE to identifying the scope of impact within the company and implementing emergency measures.
Is Changing a Database Table Prefix Really Effective? Let’s Examine This Using Actual Attack Logs.
Here, we’ll explain how to monitor and respond to WordPress vulnerability information within your organization.
We’ll explain typical patterns of malicious code embedded in WordPress’s `wp_posts` and `wp_options` tables as a result of malware infection, as well as how to distinguish it from legitimate code. Malware Infection and Tampering of the WordPress Database In the event of a malware
Here’s how to prevent site-wide warning messages caused by failed automatic renewals of free SSL (Let’s Encrypt).
I’d like to discuss the issue that security measures for many WordPress sites tend to focus too much on protecting the login process.
Here’s a guide on how to regain administrator privileges after the person in charge of your WordPress site—which you had outsourced to a production company—has resigned or gone out of business.
The site looks normal, but search results are flooded with product pages or appear in Chinese—here’s an explanation of how to detect and completely remove SEO spam.
Slider Revolution (RevSlider) case study will explain the risks of “plug-ins that are out of license or have been moved to paid” and how to deal with vulnerabilities of such plug-ins.
We will explain how to identify and deal with the three causes of WordPress malware that can resurface after a certain period of time even if it is removed: malicious processes, mu-plugins, and hidden administrators.
We will explain how to use a security plugin to automatically prevent WordPress htaccess and index.php from being rewritten by malware.
WordFence says “no problem” even though the site is infected with malware, and Google Search Console is giving a malware warning. Or conversely, we will explain the discrepancy where WordFence detects malware and Search Console and Safe Browsing show no problem.
We will explain the latest password policy (how to determine a unified password) when using WordPress with multiple administrators and editors (contributors).
