WordPress is an open source content management system running on PHP and MySQL, and often used as a blog engine.

learn more… | top users | synonyms

1
vote
1answer
364 views

Hackers attack against wp-config.php

my wordpress site suddenly be hacked via wp-config.php. I have never known this type of attack. When i scan my site, wpscan warn against this errors: How can i protect my site from this attack? ...
0
votes
1answer
30 views

How does this wordpress XSS work?

There is a new Wordpress exploit in wp-includes/formatting.php $textarr = preg_split('/(<.*>|\[.*\])/Us', $text, -1, PREG_SPLIT_DELIM_CAPTURE); General problem here is that they try to parse ...
1
vote
0answers
69 views

Emails about Referrer Bombing

I have received a couple of emails recently from site owners saying that they are finding referrer links in their stats with their URL path but my domain. So if a website has a page ...
0
votes
0answers
73 views

How are brute force attacks hitting my WP website after renaming wp-admin folder?

We maintain several wordpress websites which receive regular attempts at brute forcing the admin credentials. Part of our standard rollout package is installing the All in One WP Security and Firewall ...
0
votes
0answers
35 views

minimizing the attack in WordPress and Joomla websites by using modsecurity

Just a thought! Suppose I am from country A, is it possible to limit the users to access WordPress administrator page (wp-login.php, wp-admin) and Joomla administrator page (administrator/index.php) ...