16 Plugins to Help You Communicate With Your Users

by Rachel McColli A website is a communications tool. You create one to communicate with visitors, and to give them somewhere they can communicate with you. Whether your site is for blogging, marketing, selling, fundraising or passing on information, one of your key concerns will be making sure you can communicate with your visitors to […]

Security Advisory – Vulnerabilities in Pagelines/Platform theme for WordPress

Advisory for: Pagelines and Platform Themes Security Risk: Very High Exploitation level: Easy/Remote DREAD Score: 9/10 Vulnerability: Privilege Escalation / Remote Code Execution Patched Version: 1.4.6 Users of both the Pagelines and Platform themes should update as soon as possible. During a routine audit for our WAF, we found two dangerous issues: A Privilege Escalation vulnerability affecting […]

AdSense Abused with Malvertising Campaign

Last weekend we noticed a large number of requests to scan websites for malware because they randomly redirected to some “magazine” websites. Most of them mentioned the lemode-mgz .com site. In all cases, the symptoms were the same. Some users randomly got redirected when they clicked on links or loaded new pages. They all reported […]

vBSEO’s Vulnerability Leads to Remote Code Execution

We were notified last week that the vBulletin team sent an email to all their clients about a potential security vulnerability in vBSEO. After further investigation, we confirm that this is a very critical issue as it could allow an attacker to execute malicious PHP code on your website, manually patching this add-on should be […]

vBulletin Releases Serious Vulnerability in VBSEO

The vBulletin team sent an email yesterday to all their clients about a potential security vulnerability on VBSEO. VBSEO is widely used SEO module for vBulletin that was discontinued last year. This makes the problem worse, no patches will be released for it. If you are using VBSEO, you have 3 options: Completely remove VBSEO […]

Websites Compromised with CloudFrond Injection

If you haven’t already noticed, we spent a good deal of time scraping the bottom of the interweb barrel, it’s dirty work, but someone has to do it. I’m not going to lie though, to us it’s fascinating digging up little nuggets daily, understanding how attackers think and uncovering the latest trends. Besides, it gives […]

20 Must Have WordPress Plugins for 2015 (Expert Pick)

Before anything else, let us greet you a Happy New Year! New year comes with firsts and new stuff to try. With no further ado, here are the ‘must have’ WordPress plugins for this year. 20 Must Have WordPress Plugins for 2015 (Expert Pick) Are you looking for the must have WordPress plugins used by […]