Category: Wordpress Malware

Essential Addons for Elementor Plugin Vulnerability Leads To Over Million Sites Hacked

A severe security flaw in a popular WordPress plugin called Essential Addons for Elementor. The flaw is an unauthenticated privilege escalation vulnerability that allows any unauthenticated user to escalate their privilege to that of any user on the WordPress site. The wordpress vulnerability could be weaponized to reset the password …

Wordpress Malware / Wordpress Security

WP Elementor Pro Vulnerability Exploit Update Version 3.11.7

WordPress Elementor Pro Vulnerability Are you aware of the Elementor Pro vulnerability that can result in your website being hacked? If no, then attention WordPress users! A popular WordPress website builder plugin Elementor Pro has been found to contain a critical vulnerability that can enable threat actors to gain complete …

Ecommerce Security / Wordpress Exploits / Wordpress Malware / Wordpress Security / Wordpress Vulnerabilities

Linux.BackDoor Malware – Targetting Vulnerable WordPress plugins

A new malware called Linux.BackDoor.WordPressExploit.1 has been discovered targeting WordPress sites, exploiting 30 vulnerabilities in outdated WordPress plugins and themes. The malware injects malicious JavaScript into the targeted websites, allowing the infected sites to redirect visitors to other malicious sites and disabling event logging, going into sleep mode and shutting …

Wordpress Exploits / Wordpress Malware / Wordpress Security / Wordpress Vulnerabilities

How to Fix Push Notification Malware in a WordPress Website?

Push Notification WordPress Malware A team of security researchers tracked malicious domains for push notification malware in WordPress. This campaign was combined with the ongoing redirection to unknown URLs in WordPress sites. A few domains where the redirection is happening include inpagepush[.]com, asoulrox[.]com and iclickcdn[.]com, justcannabis[.]online, 0.realhelpcompany[.]ga, fast.helpmart[.]ga/m[.]js?w=085, etc. Hackers …

Wordpress Malware

Websites Redirecting to Digestcolect .com – Elementor Pro Vulnerabilities

Attacks targeting vulnerabilities in WordPress themes and plugins have only gotten worse in recent months.  The already ongoing attack campaign on WordPress plugins – Elementor Pro, The Ultimate Addons of Elementor seems to have taken a new turn with redirect hack campaigns surfacing redirecting users to malicious digestcolect [.] com, …

Wordpress Malware

Malware Redirecting Websites To Outlook Pages & Fake Phishing Sites

WordPress Redirecting to Phishing Pages is hackers’ most common WordPress vulnerability and is also one of the most dangerous attacks on WordPress.  Although the initial attack has been eliminated. A new strain of malware redirects the website to phishing pages such as Microsoft’s outlook, security, antivirus companies and known malicious …

Wordpress Malware

Massive Wave Of Compromised WordPress Sites – STILL ONGOING [News]

Recent investigation has revealed that more than 2,000 WordPress sites have been hacked as part of a campaign to redirect visitors to various fraudulent sites containing spam notification subscriptions, fake surveys, giveaways, and even fake Adobe Flash downloads. A security company discovered the hacking campaign when its researchers detected attackers …

Cyber Security / Wordpress Malware