News Hackers are actively exploiting zero-days in several WordPress plugins

[Mr.Kurd]

In The Name OF Allah

Al-Salam Alekum

The more you are trying to grow! The more you get targeted by the stranger. WordPress is the most used Website Script according to last 2019 reports. Hackers always finding their way in as WordPress under many pen-testers focus.

During the past two weeks, we've seen a resurgence in attacks against WordPress sites, signaling an end to the period of relative calm we've seen in December and January.


Several cybersecurity firms specialized in WordPress security products -- such as Wordfence, WebARX, and NinTechNet -- have reported on an ever-increasing number of attacks on WordPress sites.

All the new attacks spotted last month focused on exploiting bugs in WordPress plugins, rather than exploiting WordPress itself.
Many of the attacks targeted recently patched plugin bugs, with the hackers hoping to hijack sites before site administrators had a chance to apply security patches. However, some of the attacks were also a little bit more sophisticated. Some attackers also discovered and started exploiting zero-days -- a term used to describe vulnerabilities that are unknown to the plugin authors.

The Source

Wa Salam Alekum