Are you Using WordPress CMS CORE v4.9* ??? You may be hacked .....!!!

RIPS code Security Analysis detects unknown security issues in your PHP application bundles including Wordpress, Mooddle, Prestashop, Joomla and much more without false positive noise. This is More about an unpatched security flaw impacting WordPress, the Internet’s most popular content management system (CMS).RIPS experts said they have told the WordPress team about this particular vulnerability in November last year, but the WordPress Development Team have failed to release a new patch. This flaw can affect the core of the WordPress CMS and not one of its plugins or themes. More accurately, the bug was found in the PHP functions that delete thumbnails for images uploaded on a WordPress site.


That’s basically all there is to it. Update WordPress, update your plugins, and update your themes. Vulnerabilities are constantly being exposed, and automated hacks can easily take advantage of them to compromise your site.It’s also critical to check your premium plugins to ensure they are up to date. They don’t always warn you, and are typically the biggest targets. As per a study the following plugins are most likely to be compromised and most critical to update:


Revolution Slider

Gravity Forms

Visual Composer


RIPS experts found that users who have access to the post editor — and can upload or delete images (and their thumbs)— can insert malicious code in a WordPress site that deletes crucial files part of the WordPress CMS core, something that should not be possible in any way without access to the server’s FTP. RIPS researchers warn that if an attacker manages to register even a low-level “User” account on a site and then elevate its privileges, he can exploit this vulnerability to hijack sites. They can hijack sites because the vulnerability allows attackers to delete wp-config.php, which is a site’s config file.Attackers who delete this file can re-initiate the installation process and install the site using their own database settings, effectively hijacking the site to deliver custom or malicious content....Read More

Comments

Post a Comment

Popular posts from this blog

N Chandrasekaran appointed chairman of Tata Sons

Image
The board of directors of Tata Sons, at its meeting has unanimously appointed N Chandrasekaran as executive chairman, Tata Sons. N Chandrasekaran shall take charge from February 21, 2017. The board of Tata Sons said, “Chandrasekaran has demonstrated exemplary leadership as the chief executive officer and managing director, Tata Consultancy Services. We believe he will now inspire the entire Tata group to realise its potential acting as leaders in their respective businesses, always in keeping with our value system and ethics and adhering with the practices of the Tata group which have stood it in good stead.” Chandrasekaran was the chief executive officer and managing director of Tata Consultancy Services since 2009. A Tata lifer, he had joined the company in 1987 and was appointed as a director on the board of Tata Sons on October 25, 2016.
Read more

Visa buys NFT based CryptoPunk and paid $150,000 in Etherium

Image
Visa buys NFT based CryptoPunk and paid $150,000 in Etherium:  Leader in the digital payments   Visa   has purchased a digital CryptoPunk for $150,000, marking the company's first ever   NFT   purchase. The deal is clearly shows that, Visa is stepping into the world of NFTs with its purchase of   CryptoPunk 7610 .   Going forward, NFTs and Visa to align and integrate them in new brand strategy to gain a sizable market share. However, NFTs have often been compared to physical collectible items like rare trading cards and works of art.   The CryptoPunk 7610, which feBlatures a female punk with a mohawk and large green eyes. "We envision there could be a future where your crypto address becomes as important as your mailing address," Visa's Head of Crypto said.   An NFT - which stands for non-fungible token - is a unique digital asset designed to represent ownership of a virtual item. Unlike bitcoin and other cryptocurrencies, NFTs can’...
Read more

Prizm Payment Services changes its name to Hitachi Payment Services

Image
Hitachi Payment Services Pvt. Ltd has changed its corporate name from Prizm Payment Services Pvt. Ltd (“Prizm Payment Services”) to Hitachi Payment Services Pvt. Ltd (“Hitachi Payment Services”). “The new name reflects Hitachi’s commitment to business expansion in India, and to build a strong global financial payments offering leveraging the expertise of the Prizm Payment Services acquisition. Hitachi sees immediate potential to grow in the Asian subcontinent markets with the epicentre of growth being India, and migrate into other markets. Also, the name change will have no change on Prizm Payment Services’ operations,” said Loney Antony, Managing Director, Hitachi Payment Services. “Hitachi had acquired Prizm Payment Services with the aim of accelerating global development of IT services businesses targeting financial institutions, particularly in the fast-growing Asian region, and the company has been the gateway of entering into the services business in India for Hitachi. We ...
Read more