{"id":3094,"date":"2017-04-12T06:37:53","date_gmt":"2017-04-12T06:37:53","guid":{"rendered":"https:\/\/link2city.com\/dev\/wordpress-vulnerabilities\/"},"modified":"2017-04-12T06:37:53","modified_gmt":"2017-04-12T06:37:53","slug":"wordpress-vulnerabilities","status":"publish","type":"post","link":"https:\/\/link2city.com\/dev\/wordpress-vulnerabilities\/","title":{"rendered":"WordPress Vulnerabilities"},"content":{"rendered":"<h1><strong>WordPress Vulnerabilities<\/strong><\/h1>\n<p><strong>Fake WordPress Plugin Opens Sites to Criminals<\/strong><\/p>\n<p>A fake WordPress plugin is trending, targeting one of the world\u2019s largest open-source applications in order to allow back-door access to a host of websites.<\/p>\n<p>Dubbed WP-Base-SEO, the plugin is a forgery of a legitimate search engine optimization plugin, called WordPress SEO Tools, according to SiteLock, the firm that originally uncovered the threat. At first glance, the file appears to be legitimate, because it uses native WordPress hook functionality. A closer look, though, reveals its malicious intent in the form of a base64 encoded PHP eval request.<\/p>\n<p>Eval is a PHP function that executes arbitrary PHP code. It is commonly used for malicious purposes and php.net recommends against using it, SiteLock noted. Here, it\u2019s attached as an \u201caction\u201d to the header of the website\u2019s theme. WordPress defines actions as the hooks that the WordPress core launches at specific points during execution, or when specific events occur. Plugins can specify that one or more of its PHP functions are executed at these points, using the Action API. And that means that remote attackers now have back-door access, and can force the site to do their bidding.<\/p>\n<p>&#8220;Some versions include an additional hook that runs after each page load as well, which means that anytime the theme is loaded in a browser, the request is initialized,&#8221; SiteLock noted. It added that researchers have observed that multiple sites have been infected by the malware, but an internet search of the plugin name revealed no information, suggesting that it may be flying under the radar of other malware scanners.<\/p>\n<p>WordPress site administrators should perform a malware scan, as well as update the WordPress core, all themes and plugins to their latest versions. It is also crucial to use strong passwords and reputable plugins.<\/p>\n<p>If you are unsure of what plugins you have installed, call Link2city today so that we can check your site.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>WordPress Vulnerabilities Fake WordPress Plugin Opens Sites to Criminals A fake WordPress plugin is trending, targeting one of the world\u2019s largest open-source applications in order to allow back-door access to a host of websites. Dubbed WP-Base-SEO, the plugin is a forgery of a legitimate search engine optimization plugin, called WordPress SEO Tools, according to SiteLock, [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[54],"tags":[],"class_list":["post-3094","post","type-post","status-publish","format-standard","hentry","category-web-development"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.5 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>WordPress Vulnerabilities | Fake WordPress plugin is trending<\/title>\n<meta name=\"robots\" content=\"noindex, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"WordPress Vulnerabilities | Fake WordPress plugin is trending\" \/>\n<meta property=\"og:description\" content=\"WordPress Vulnerabilities Fake WordPress Plugin Opens Sites to Criminals A fake WordPress plugin is trending, targeting one of the world\u2019s largest open-source applications in order to allow back-door access to a host of websites. Dubbed WP-Base-SEO, the plugin is a forgery of a legitimate search engine optimization plugin, called WordPress SEO Tools, according to SiteLock, [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/link2city.com\/dev\/wordpress-vulnerabilities\/\" \/>\n<meta property=\"og:site_name\" content=\"Link2CITY Your Premier Full-Service Digital Agency in Miami\" \/>\n<meta property=\"article:published_time\" content=\"2017-04-12T06:37:53+00:00\" \/>\n<meta name=\"author\" content=\"admin\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"admin\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/link2city.com\\\/dev\\\/wordpress-vulnerabilities\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/link2city.com\\\/dev\\\/wordpress-vulnerabilities\\\/\"},\"author\":{\"name\":\"admin\",\"@id\":\"https:\\\/\\\/link2city.com\\\/dev\\\/#\\\/schema\\\/person\\\/b906004162ea569cc7e078e1378ff1a2\"},\"headline\":\"WordPress Vulnerabilities\",\"datePublished\":\"2017-04-12T06:37:53+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/link2city.com\\\/dev\\\/wordpress-vulnerabilities\\\/\"},\"wordCount\":325,\"articleSection\":[\"Web Development\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/link2city.com\\\/dev\\\/wordpress-vulnerabilities\\\/\",\"url\":\"https:\\\/\\\/link2city.com\\\/dev\\\/wordpress-vulnerabilities\\\/\",\"name\":\"WordPress Vulnerabilities | Fake WordPress plugin is trending\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/link2city.com\\\/dev\\\/#website\"},\"datePublished\":\"2017-04-12T06:37:53+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/link2city.com\\\/dev\\\/#\\\/schema\\\/person\\\/b906004162ea569cc7e078e1378ff1a2\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/link2city.com\\\/dev\\\/wordpress-vulnerabilities\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/link2city.com\\\/dev\\\/wordpress-vulnerabilities\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/link2city.com\\\/dev\\\/wordpress-vulnerabilities\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/link2city.com\\\/dev\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"WordPress Vulnerabilities\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/link2city.com\\\/dev\\\/#website\",\"url\":\"https:\\\/\\\/link2city.com\\\/dev\\\/\",\"name\":\"Link2CITY Your Premier Full-Service Digital Agency in Miami\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/link2city.com\\\/dev\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/link2city.com\\\/dev\\\/#\\\/schema\\\/person\\\/b906004162ea569cc7e078e1378ff1a2\",\"name\":\"admin\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/283ce867daeab46910e469b6f12372bf918509304b41bfd0fa544af358df5c8c?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/283ce867daeab46910e469b6f12372bf918509304b41bfd0fa544af358df5c8c?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/283ce867daeab46910e469b6f12372bf918509304b41bfd0fa544af358df5c8c?s=96&d=mm&r=g\",\"caption\":\"admin\"},\"sameAs\":[\"https:\\\/\\\/link2city.com\\\/dev\"],\"url\":\"https:\\\/\\\/link2city.com\\\/dev\\\/author\\\/l2cadmin\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"WordPress Vulnerabilities | Fake WordPress plugin is trending","robots":{"index":"noindex","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"og_locale":"en_US","og_type":"article","og_title":"WordPress Vulnerabilities | Fake WordPress plugin is trending","og_description":"WordPress Vulnerabilities Fake WordPress Plugin Opens Sites to Criminals A fake WordPress plugin is trending, targeting one of the world\u2019s largest open-source applications in order to allow back-door access to a host of websites. Dubbed WP-Base-SEO, the plugin is a forgery of a legitimate search engine optimization plugin, called WordPress SEO Tools, according to SiteLock, [&hellip;]","og_url":"https:\/\/link2city.com\/dev\/wordpress-vulnerabilities\/","og_site_name":"Link2CITY Your Premier Full-Service Digital Agency in Miami","article_published_time":"2017-04-12T06:37:53+00:00","author":"admin","twitter_card":"summary_large_image","twitter_misc":{"Written by":"admin","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/link2city.com\/dev\/wordpress-vulnerabilities\/#article","isPartOf":{"@id":"https:\/\/link2city.com\/dev\/wordpress-vulnerabilities\/"},"author":{"name":"admin","@id":"https:\/\/link2city.com\/dev\/#\/schema\/person\/b906004162ea569cc7e078e1378ff1a2"},"headline":"WordPress Vulnerabilities","datePublished":"2017-04-12T06:37:53+00:00","mainEntityOfPage":{"@id":"https:\/\/link2city.com\/dev\/wordpress-vulnerabilities\/"},"wordCount":325,"articleSection":["Web Development"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/link2city.com\/dev\/wordpress-vulnerabilities\/","url":"https:\/\/link2city.com\/dev\/wordpress-vulnerabilities\/","name":"WordPress Vulnerabilities | Fake WordPress plugin is trending","isPartOf":{"@id":"https:\/\/link2city.com\/dev\/#website"},"datePublished":"2017-04-12T06:37:53+00:00","author":{"@id":"https:\/\/link2city.com\/dev\/#\/schema\/person\/b906004162ea569cc7e078e1378ff1a2"},"breadcrumb":{"@id":"https:\/\/link2city.com\/dev\/wordpress-vulnerabilities\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/link2city.com\/dev\/wordpress-vulnerabilities\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/link2city.com\/dev\/wordpress-vulnerabilities\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/link2city.com\/dev\/"},{"@type":"ListItem","position":2,"name":"WordPress Vulnerabilities"}]},{"@type":"WebSite","@id":"https:\/\/link2city.com\/dev\/#website","url":"https:\/\/link2city.com\/dev\/","name":"Link2CITY Your Premier Full-Service Digital Agency in Miami","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/link2city.com\/dev\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/link2city.com\/dev\/#\/schema\/person\/b906004162ea569cc7e078e1378ff1a2","name":"admin","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/283ce867daeab46910e469b6f12372bf918509304b41bfd0fa544af358df5c8c?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/283ce867daeab46910e469b6f12372bf918509304b41bfd0fa544af358df5c8c?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/283ce867daeab46910e469b6f12372bf918509304b41bfd0fa544af358df5c8c?s=96&d=mm&r=g","caption":"admin"},"sameAs":["https:\/\/link2city.com\/dev"],"url":"https:\/\/link2city.com\/dev\/author\/l2cadmin\/"}]}},"_links":{"self":[{"href":"https:\/\/link2city.com\/dev\/wp-json\/wp\/v2\/posts\/3094","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/link2city.com\/dev\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/link2city.com\/dev\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/link2city.com\/dev\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/link2city.com\/dev\/wp-json\/wp\/v2\/comments?post=3094"}],"version-history":[{"count":0,"href":"https:\/\/link2city.com\/dev\/wp-json\/wp\/v2\/posts\/3094\/revisions"}],"wp:attachment":[{"href":"https:\/\/link2city.com\/dev\/wp-json\/wp\/v2\/media?parent=3094"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/link2city.com\/dev\/wp-json\/wp\/v2\/categories?post=3094"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/link2city.com\/dev\/wp-json\/wp\/v2\/tags?post=3094"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}