Red Security

Quote:During the past two weeks, we've seen a resurgence in attacks against WordPress sites, signaling an end to the period of relative calm we've seen in December and January.


Several cybersecurity firms specialized in WordPress security products -- such as Wordfence, WebARX, and NinTechNet -- have reported on an ever-increasing number of attacks on WordPress sites.

All the new attacks spotted last month focused on exploiting bugs in WordPress plugins, rather than exploiting WordPress itself.
Many of the attacks targeted recently patched plugin bugs, with the hackers hoping to hijack sites before site administrators had a chance to apply security patches. However, some of the attacks were also a little bit more sophisticated. Some attackers also discovered and started exploiting zero-days -- a term used to describe vulnerabilities that are unknown to the plugin authors.