«Previous post | Next post»

Don´t get me wrong now. WordPress is great, because it gives you great powers (tools) to create awesome content.

But with great powers comes a great responsibility. In this case, making your WordPress site as secure as humanly possible.

It´s also a matter of chosing the right (and best) plugins and widgets that suit your user needs the best.

And there´s tons and tons of WordPress plugins and widgets out there. Some are free, some are not. That´s great of course (to have a lot of options).

But sadly enough, many plugins (and widgets) have security vulnerabilities. Imo, try to use as few pluigins (and such) as possible.

The slider revolution security vulnerability is really serious. So check your site for vulnerabilities asap!

Do only use the ones that you absolutely must use. And if you have the skills and the knowhow, make your own code solutions instead of using third-party solutions.

And those security vulnerabilities might either have been there from the very start. Or they might show up at a later time (Sometime in the future).

This time it´s the “Slider revolution” plugin that has some really serious security vulnerability problems (over 100,000 WP sites has been infected so far).

To be exact, the “SoakSoak dot ru” malware campaign. So what does the SoakSoak dot ru malware do? It modifies your “loader.php” ( wp-includes/template-loader.php) file. So that it can inject Javascript (the malware) into loader.php.

That´s pretty serious (+11,000 domains is blacklisted by Google because of SoakSoak dot ru), but thanks to “Sucuri” and their online scanner.

You can check your WordPress page for security vulnerabilities right away.

And IF you find any vulnerabilitys. Then i would recommend that you read WPtavern´s guidelines (just click the link down below) for further actions on your behalf. Good luck!

Source:
WPtavern

Robin “V-Act” Ek
The Gaming Ground