Attackers exploit old WordPress to inject sites with code enabling site redirection, takeover

  • 15 December 2017
  • 0 replies
  • 182 views

Userlevel 7
Badge +54
December 15, 2017 By Bradley Barth
 
Attackers have exploited an old WordPress vulnerability to infect more than one thousand websites with malware capable of injecting malvertising and even creating a rogue admin user with full access privileges, according to researchers.
 
The exploited flaw is specifically found in outdated versions of the WordPress tagDiv Newspaper and Newsmag themes, according to a Dec. 14 blog post by Sucuri security analyst Douglas Santos. (Sucuri explains the vulnerability in further detail in an older report here.)
 
Full Article.

0 replies

Be the first to reply!

Reply