We will explain how to investigate unauthorized access to admin-ajax.php in WordPress
Tag: WordPress security Page 2/13
Here are five minimum security precautions to take when managing a WordPress site. In our experience, this will prevent more than 90% of hacking attempts.
Here is what to do if you are unable to download a WordPress plugin.
Vulnerability testing of WordPress plugins should be performed on a regular basis. We will explain the reasons for this.
Many of today’s malware spread infection to all folders beyond the domain folders in the server. In this article, we will discuss the infection of initial subdomain folders on unused servers, which is often overlooked.
This section describes a brute force attack that tries and breaks through WordPress users’ passwords by brute force and how to deal with it.
We would like to talk about whether hacking (tampering) with a WordPress site can lead to a case for damages for users who access the site, based on our experience.
This section describes malware that uses a text copy and paste service in WordPress.
Around 30% of the WordPress sites we receive these days have rogue WordPress users, and the hacking technique of creating rogue users on WordPress is spreading.
We will explain a new type of malware that is spreading these days: fake updates.
When a site is hacked and defaced, some webmasters generally assume that hackers have targeted your site and infiltrated it with advanced technology, but this is not the case with WordPress. This is not the case with WordPress.
There is a type of WordPress malware that registers fraudulent e-commerce site pages in Google search results without permission. We will explain whether (and when) such malicious search results disappear after the malware is removed.
We will explain the precautions to take when multiple WordPress sites across the server have been infected (tampered with) by malware.
This section describes a web shell that can be installed via a vulnerability in WordPress.
We are currently unable to update the vulnerability database of our malware scan plug-ins due to the fact that NIST has stopped updating the database.
Learn about sitemap injection, which can register incorrect pages from your WordPress site in Google’s search results without your permission, and how to deal with it.
I would like to explain why WordPress malware (tampering) spreads to all sites on the server.
Malware infection is not only a WordPress problem, but is common to all CMS. (WordPress stands out because of its overwhelming popularity, but…) There are an increasing number of cases where old Movable Type is left unattended on a server and malware infection spreads to Wo
