This site uses cookies in accordance with our Privacy Policy.
Wordfence Research and News
Category: Research
Pipdig Update: Dishonest Denials, Erased Evidence, and Ongoing Offenses
In last week’s post, we reported on some concerning code identified in the Pipdig Power Pack (P3) plugin.
Peculiar PHP Present In Popular Pipdig Power Pack (P3) Plugin
This week, our team was notified of suspicious code present in a plugin offered alongside themes sold by Pipdig, a UK-based web development team.
Hackers Abusing Recently Patched Vulnerability In Easy WP SMTP Plugin
Over the weekend, a vulnerability was disclosed and patched in the popular WordPress plugin Easy WP SMTP.
XSS Vulnerability in Abandoned Cart Plugin Leads To WordPress Site Takeovers
Last month, a stored cross-site scripting (XSS) flaw was patched in version 5.2.0 of the popular WordPress plugin Abandoned Cart Lite For WooCommerce.
Vulnerabilities Patched in WP Cost Estimation Plugin
At the end of January, Wordfence security analysts identified attackers exploiting vulnerabilities in outdated versions of the commercial plugin WP Cost Estimation & Payment Forms Builder, or WP Cost Estimation for short.
WordPress Sites Compromised via Zero-Day Vulnerabilities in Total Donations Plugin
The Wordfence Threat Intelligence team recently identified multiple critical vulnerabilities in the commercial Total Donations plugin for WordPress.
Botnet of Infected WordPress Sites Attacking WordPress Sites
The Defiant Threat Intelligence team recently began tracking the behavior of an organized brute force attack campaign against WordPress sites.
XSS Injection Campaign Exploits WordPress AMP Plugin
News broke last week disclosing a number of vulnerabilities in the AMP For WP plugin, installed on over 100,000 WordPress sites.
Trends Emerging Following Vulnerability In WP GDPR Compliance Plugin
Earlier this week the WP GDPR Compliance plugin was briefly removed from the WordPress.org repository after the discovery of critical security issues impacting its users.
Top Tools for Security Analysts in 2018
Last spring, after discussing the tools and tech used by our team, we published a list of 51 Tools for Security Analysts.
Breaking WordPress Security Research in your inbox as it happens.
