WordPress is an open source content management system running on PHP and MySQL, and often used as a blog engine.
0
votes
2answers
212 views
Stopping js malware injection on our Wordpress site
This had been added to our wordpress site, specifically in the footer.php.
hxxp://pkktjuchlrv.peguards.cc/02b31ac5iq/get.js
It is malware as defined by google, i belive it is tracking code.
We have ...
1
vote
1answer
128 views
WordPress Hacked - Found a suspicious “class-wp-style-table.php” [closed]
I recently had all of my WordPress accounts on my server hacked. The only suspicious files I found are listed below. These were the only files edited in the last 5 days (June 3, to be specific).
...
5
votes
3answers
163 views
Does disabling .htaccess improve security?
I have a new WordPress website that has been installed on a server not managed by me. Its admin has enforced a few rules in order to increase security, I'm not entirely aware of its entirety but it ...
-4
votes
0answers
126 views
Prevent Malware attack on my site [closed]
I built a wordpress site for a client. After some days, client reported that the site has been blocked by Google for Malware content. When I reviewed the site, I found some changes in the code like ...
2
votes
1answer
179 views
Understanding what bot was used for a Botnet attack
Yesterday we got to know of a massive brute force attack on WordPress admin accounts targeting weak passwords.
From an online source:
A botnet using more than 90,000 IP addresses to crack ...
2
votes
2answers
62 views
Will using SSL to secure Wordpress admin area only still actually be secure?
The vast majority of our website contains no sensitive information, logins, forms, etc. However there are portions driven by wordpress so we are looking into getting SSL to secure these areas.
There ...
1
vote
2answers
310 views
What vulnerabilities in the OWASP Top 10 are relevant to WordPress?
I have been looking at the OWASP Top 10, and am wondering which of the top 10 security risks are relevant to a WordPress installation with various plugins installed?
I know injections and XSS are ...
4
votes
1answer
408 views
Brute force login attempt from spoofed IP's
I see that many of my WordPress installs are being hit with 1000+ failed login attempts using non-existing 'admin' account name. The requests come from different IP's every time, and I see IP's such ...
4
votes
2answers
448 views
Is WordPress a security vulnerability inside a corporate intranet?
The company I work for had me develop a WordPress site for their intranet. Now they are saying that it poses security risks and they would like to shut it down and have me use another CMS (SharePoint ...
1
vote
2answers
2k views
Find the hack in the Apache2 logs?
The hack was a failure, as they were not able to put the created page as the home page. But we found recently a manipulated page on our website (via the rss).
So I looked in the Apache2 logs and ...
1
vote
1answer
152 views
Determining how my Wordpress website was compromised
I have got a blog running Wordpress. The last time I visited my blog I realized it was hacked. The website redirects to a phishing page of paypal meanwhile other links a opening fine. I want to know ...
3
votes
1answer
132 views
Malicious php scripts in word press theme folder?
I am running a server on Ubuntu 10.04 running a word press website, and recently a virus scan revealed that I have several malicious scripts sitting in the word press folder. In particular they are in ...
3
votes
2answers
449 views
How do I run a security check on my WordPress server?
I have a cloud-based server running with CentOS 6.0 and CSF installed. Today I got a message from my host that one of my WordPress installations is hacked and used for phishing.
But I don't know how ...
1
vote
2answers
110 views
What was done to gain a list of home directory accounts?
Today some sites were defaced in our WHM/cpanel VPS.
I understand that the common cause of this is outdated scripts/plugins/etc.
However as I was checking the file manager of one of the accounts I saw ...
17
votes
7answers
615 views
Protecting WordPress installations
How do you go about protecting a default WordPress installation? What checklist do you use, best practices, tips and tricks, etc? Any recommendations on plugins, third-party tools are welcome. Thanks.
...
2
votes
2answers
280 views
I have my website in wordpress and it got hacked how to secure it? [duplicate]
Possible Duplicate:
Protecting WordPress installations
i have control panel access to my wordpress website, but last week it got hacked and i found that the index.php was replced by the ...
6
votes
1answer
423 views
Google showing spam links on my site
When I search the name of my site on Google, I see site links description which are spammy and not related to my site. Sometimes when I click I get redirect to phishing sites.
But I have used many ...
2
votes
1answer
729 views
Help in understanding a PHP exploit code found on a wordpress application
I've found this code in base 64 on all php files of one of my client's sites (wordpress) and I'm trying to understand what it does.
I'm also trying to figure out if it was an application exploit or a ...
2
votes
1answer
106 views
What is a good method to report security breaches that are being used to actively spam?
I received an email the other day purporting to be from a bank I hadn't even heard of, so I decided to poke around. On some quick investigation, it looks like something has just latched onto some poor ...
0
votes
1answer
263 views
Wordpress online pharmacy hack? [duplicate]
Possible Duplicate:
Protecting WordPress installations
anybody knows how to protect your WordPress website from online pharmacy spam, even after deleting all spam files and deleting spam ...
