WordPress Security: Brute Force Amplification Attack Targeting Thousand of Blogs

Most of the times, we have reported about WordPress vulnerabilities involving vulnerable plugins, but this time security researchers have discovered Brute Force Amplification attacks on the most popular CMS (content management system) platform.



Researchers from security firm Sucuri have found a way to perform Brute Force amplification attacks against WordPress' built-in XML-RPC feature to

Thousands of Hacked WordPress Sites Abused to Infect Millions of Visitors

A Large number of WordPress websites were compromised in last two weeks with a new malware campaign spotted in the wild.



WordPress, a Free and Open source content management system (CMS) and blogging tool, has been once again targeted by hackers at large scale.



Researchers at Sucuri Labs have detected a “Malware Campaign” with an aim of getting access to as many devices they can by

WordPress Vulnerability Puts Millions of Websites At Risk

Millions of WordPress websites are at risks of being completely hijacked by the hackers due to a critical cross-site scripting (XSS) vulnerability present in the default installation of the widely used content management system.



The cross-site scripting (XSS) vulnerability, uncovered by the security researcher reported by Robert Abela of Security firm Netsparker.



Wordpress vulnerability

New Dark Web Marketplace Offers Zero-Day Exploits to Hackers

Hackers have sold secrets of zero-day exploits in the underground Dark Web marketplace such as the Silk Road and its various successors for years, and now a new deep web marketplace has appeared that offers anonymity protection to its sellers.



A new Dark Web market, called "TheRealDeal," has opened up for hackers, which focuses on selling Zero-Day exploits — infiltration codes that took

Own a WordPress Website? ISIS is After You — FBI warns

If you run a self-hosted WordPress website, then you must Beware:



"ISIS is after you."



Yes, you heard right. The United States Federal Bureau of Investigation (FBI) is warning WordPress users to patch vulnerable plugins for the popular content management system before ISIS exploit them to display pro-ISIS messages.



According to the FBI, ISIS sympathizers are targeting WordPress sites

'Google Analytics by Yoast' WordPress Plugin Patches Critical Vulnerability

Another popular WordPress plugin by Yoast has been found to be vulnerable to a critical flaw that could be exploited by hackers to hijack the affected website.
The critical vulnerability actually resides in the highly popular Google Analytics by Yoast plugin, which allows WordPress admins to monitor website traffic by connecting the plugin to their Google Analytics account.
The Google Analytics

WordPress Plugin Zero-Day Vulnerability Affects Thousands of Sites

A critical zero-day vulnerability has been discovered in a popular WordPress plugin, called 'FancyBox for WordPress', which is being used by hundreds of thousands of websites running on the most popular Blogging Platform Wordpress.



0-DAY FLAW EXPLOITED IN THE WILD

The security researchers at network security firm Sucuri issued a warning Wednesday about the zero-day vulnerability that is