Jonas Lejon

Hardening the web server of your WordPress website

Web servers are unique in network environments because they are exposed to the internet and serve web traffic to potentially unknown users. Furthermore, web servers often run dynamic applications like WordPress websites or act as proxies for internal applications. Thus, it is not surprising that they are desirable targets for attackers. Hardening a system involves …

Hardening the web server of your WordPress website Read More »

Ongoing Cyberattack Exploits Ultimate Member Plugin

Ongoing Cyberattack Exploits Ultimate Member Plugin

Automattic’s WP.cloud and Pressable.com platforms have recently noticed a disturbing pattern of compromised sites. They found that illegitimate new administrator accounts were continuously appearing on the impacted sites. After investigating this matter, a post on the WordPress.org support forums by Slavic Dragovtev brought to light a potential security problem. The issue revolved around a Privilege …

Ongoing Cyberattack Exploits Ultimate Member Plugin Read More »

Critical Security Flaw in the WooCommerce Payments plugin

On March 22, 2023, a significant security flaw was identified in the WooCommerce Payments plugin, a widely used eCommerce payment plugin for WordPress with over 500,000 active installations. Fortunately, white hat security researcher Michael Mazzolini discovered the vulnerability and responsibly disclosed it through HackerOne, allowing websites to install the patched version 5.6.2 before the full …

Critical Security Flaw in the WooCommerce Payments plugin Read More »

How to Protect Your WordPress Site Against Hackers: Top Tips for Optimal Security

In today’s digital world, website security is more important than ever. WordPress, the most popular content management system (CMS), is often targeted by hackers. Protecting your WordPress site against cyber threats is crucial to safeguard your data, customers, and online reputation. This blog post will share tips to help you secure your WordPress site from …

How to Protect Your WordPress Site Against Hackers: Top Tips for Optimal Security Read More »

Reducing the WordPress Attack Surface

WordPress is a widely used content management system that powers millions of websites. Security is crucial for the owners running WordPress sites as a breached site can seriously compromise its users and damage their brand’s identity. This blog post looks at some essential WordPress security requirements and hardening methods without requiring a third-party plugin to …

Reducing the WordPress Attack Surface Read More »

How to scan your WordPress instances for Security Issues using WPScan

WordPress is a free, open-source web development platform. WordPress is a content management system (CMS) created in PHP and primarily uses MySQL or MariaDB databases. This is a more technical blog post. WordPress is today’s most user-friendly and powerful blogging, content management, e-commerce, and website builder. A Sneak-peek on WPScan The WPScan security scanner was developed …

How to scan your WordPress instances for Security Issues using WPScan Read More »

How to protect (and quicken) your WordPress instances with a reverse proxy

WordPress powers about 60% of all websites on the internet, which is a staggering figure by any standard. Most of these WordPress instances lack many basic security features that can mean the difference between your website being hacked and… well, not hacked. In this article, we’re going to run through the process of setting up …

How to protect (and quicken) your WordPress instances with a reverse proxy Read More »

How to Break Into WordPress Installations, and How Implementing 2-Factor-Authentication Can Prevent It

How to Break Into WordPress Installations, and How Implementing 2-Factor-Authentication Can Prevent It

Author: Luke Stephens Like any system, there are many ways to break into a WordPress installation, to name a few:  Exploiting an out of date, vulnerable WordPress core Exploting vulnerable plugins or themes Man-in-the-middle attacks Social engineering One of the most common ways to break into a WordPress installation is to simply find the password …

How to Break Into WordPress Installations, and How Implementing 2-Factor-Authentication Can Prevent It Read More »

Eight-Year Study Shows the Dark Side of WordPress Plugins

A recent study has revealed that spammers have infected 47,000+ WordPress plugins since 2012. This is a significant number, given that plugins are a fundamental component of website development. Researchers used the web development tool YODA to track the origins of the malware, and they found that every compromised website contained at least two malicious …

Eight-Year Study Shows the Dark Side of WordPress Plugins Read More »