Archive by Author

WordPress Vulnerability & Patch Roundup June 2023

Vulnerability reports and responsible disclosures are essential for website security awareness and education. Automated attacks targeting known software vulnerabilities are one of the leading causes of website compromises. To help educate website owners on emerging threats to their environments, we’ve compiled a list of important security updates and vulnerability patches for the WordPress ecosystem this […]

Remote Code Execution Backdoor Uses Unicode Obfuscation & Non-Standard File Extensions

Readers of this blog will know that attackers are constantly finding new ways to hide their malware and avoid detection; after all, that’s what good malware does best! We have recently observed attackers leveraging both excessive amounts of unicode as well as peculiar includes and file extensions within their WordPress backdoors to conceal their malware […]

New WooCommerce Security Best Practices Guide

WooCommerce is a widely used e-commerce platform, powering nearly 6 million online stores worldwide. Its popularity makes it a prime target for cybercriminals looking to exploit vulnerabilities and steal sensitive data and credit card information. In fact, according to data from our latest 2022 hacked website report, the top three most common cleanup signatures for […]

Demystifying Website Hacktools: Types, Threats, and Detection

When we think about website malware, visible infection symptoms most often come to mind: unwanted ads or pop-ups, redirects to third party sites, or spam keywords in search results. However, in some cases these very symptoms are the results of hacktools, a diverse and often insidious category of software designed to exploit vulnerabilities and compromise […]

What Are WordPress Salts & Security Keys?

In the realm of WordPress security, there’s a powerful tag team working tirelessly behind the scenes to safeguard your website’s login process. Meet salts and security keys, the cryptographic wonders responsible for protecting the sensitive information housed within the cookies that WordPress depends on for authentication. Think about it: when you log into your WordPress […]

What is a 403 Error & How to Fix It

A 403 error can be a frustrating interruption to anyone’s day; it can lead to exasperated website visitors, even leading to lost traffic and website revenue depending on the affected page. When you (or your site visitors) encounter an unexpected 403, it’s vital to assess the issue promptly in the event that it’s the symptom […]

Why Your IP Address is Blocked & How to Fix It

Imagine this scenario: You’re sipping a delightful cup of tea (I’m English) while catching up on the latest news when suddenly – wham! You find yourself blocked by a website, encounter a captcha verification — or perhaps your comment on a news story mysteriously vanishes into thin air. Puzzled, you shoot off an email to […]

How to Update, Install & Remove WordPress Plugins & Themes With WP-CLI

WordPress, like other open-source content management systems, allows you to enhance your website’s appearance and functionality through custom code and third-party components like plugins and themes. It’s these extensions that allow you to publish content with added functionality for your visitors and facilitate the unique look of your brand. While the developers who build these […]

WordPress Vulnerability & Patch Roundup May 2023

Vulnerability reports and responsible disclosures are essential for website security awareness and education. Automated attacks targeting known software vulnerabilities are one of the leading causes of website compromises. To help educate website owners on emerging threats to their environments, we’ve compiled a list of important security updates and vulnerability patches for the WordPress ecosystem this […]