On a daily basis at Sucuri, we hear things like: “My host takes care of my website security.”ATHEARN HO SCALE ATH98061 NORFOLK & WESTERN SD45 DIESEL LOCOMOTIVE NEW “I have never been hacked, so why should I care?” Or here’s a personal favorite: “I’ll take care of it if (when) it happens.” Let’s be honest,…
Read More about Who is Responsible for the Security of Your Website?
During a routine research audits for our Sucuri Firewall, we discovered an Unauthenticated Persistent Cross-Site Scripting (XSS) affecting 60,000+ users of the WP Live Chat Support WordPress plugin.(EH120) Liliput Konvolut DC H0 4er-Set Rheingoldwagen der DRG, EVP Current State…
Read More about Persistent Cross-site Scripting in WP Live Chat Support Plugin
Give is a WordPress plugin which allows users to setup a donation page on a website.HUGE HO Scale Locomotive & Train Car Lot (Tyco, Atlas, Athearn, Walthers)107 Pcs It currently has 60k installs. During a recent audit of the plugin, we found…
Read More about WordPress Plugin Give – Stored XSS for Donors
Soo Line FP7 A B Passenger Locomotive Set DCC Ready HO - Athearn ATHG22545The Ultimate member plugin version 2.0.45 and lower is affected by multiple vulnerabilities, among them is a critical vulnerability allowing malicious users to read and delete your wp-config.php file,ANTIQUE MAXWELL MODEL DISTRIBUTORS INC CATALOG which…
Read More about Multiple Vulnerabilities in the WordPress Ultimate Member Plugin
Ag380-0, 5 Märklin H0 Ac 5126 DKW Slip Switch for 3600 800 Center ConductorReferral programs and affiliate marketing opportunities can be found on many web-based company sites, however, often they’re overlooked. Soviet JSU 152 Assault GunsCommonly people consider these programs as something that they, “should leave to the…
Sucuri is partnering with GoDaddy Pro to make the internet more secure, Painted Miniature Evil Priest Darkrasp Dungeons and Dragons, glow in the darkone website professional at a time. Developers, designers, agencies, and freelancers now have an exclusive avenue to level…
D FantiX Gan 356 Air SM Speed Cube 3x3 Gans Air SM Magnetic Cube 3x3x3 Puzzle
During regular research audits for our Sucuri Firewall (WAF), Hornby R3126 BR Class 52XX 2-8-0T '5243'we discovered a Cross Site Request Forgery (CSRF) leading to a persistent Cross Site Scripting vulnerability affecting 70,000+ users of the…
Nme H0 503802 - Staubsilowagen Uacns Evs - Vintage Vi - NewAlthough the majority of sites we work on are powered by PHP, we still have clients whose sites use other programming languages. The other day we cleaned an ASP site…
Attackers commonly rely on backdoors to easily gain reentry and maintain control over a website. They also use PHP functions to further deepen the level of their backdoors. A good…1 72 Ferdinand, 1.Kompanie, sPzJgAbt.653, Orel Eastern Front, July 1943
Marklin 26194 HO Train Set with a Class ET 194 Freight Powered Rail Car
We have recently published posts regarding banking malware and some of the ways it uses compromised websites to infect victim’s devices (smartphones, computers, POS terminals). Woodland Scenics Mat Green Grass Large 50x100inch (1270x2540mm) rg5122Now let us look into…
NEW Biped walking Robbi 2 Height approx 17 cm Toy Electric robot From JAPAN
Due to the poor handling of a vulnerability disclosure, a new attack vector has appeared for the WooCommerce Checkout Manager WordPress plugin and is affecting over 60,000 sites.Beyond the Gates of Antares Starter Set box English plastic If you…
Read More about Insufficient Privilege Validation in WooCommerce Checkout Manager
