| Home : July 24 2014 Computer News : 50,000 sites hacked through WordPress plug-in vulnerability |
|
50,000 sites hacked through WordPress plug-in vulnerability |
July 24, 2014
A critical vulnerability found recently in a popular newsletter plug-in for WordPress is actively being targeted by hackers and was used to compromise an estimated 50,000 sites so far.The security flaw is located in MailPoet Newsletters, previously known as wysija-newsletters, and was fixed in version 2.6.7 of the plug-in released on July 1. If left unpatched, it allows attackers to upload arbitrary PHP files on the Web server and take control of the site.MailPoet Newsletters has been downloaded almost 2 million times from the official WordPress plug-in repository to date.To read this article in full or to leave a comment, please click here
Link: http://www.pcworld.com/article/2458080/thousands-of-sites-compromised-through-wordpress-plugin-vulnerability.html#tk.rss_all
|
|
|
|
|
