
Updates and notices about my #AntiMalware plugin for #WordPress to helps you stay safe. Twitter is NOT my Support Forum, please don't post questions here ;-)
Hawaii
Joined September 2012
- Tweets195
- Following0
- Followers543
- Likes40
#WordPress 4.9 (released only two weeks ago) is affected by four security issues which could potentially be exploited as part of a multi-vector attack.
#PluginUpdate (4.16.36): Added more firewall options and fixed bugs for full compatibility with #WordPress 4.6.1
#WordPress 4.5.3 = new security fixes, but #core still have not committed the tags for other releases (4.4.4, 4.3.5, 4.2.9 ... 3.8.15, etc.)
It should remove all malicious code from all files, but it will not delete the files because that can cause the site to crash.
#PluginUpdate (4.16.17): Fixed admin menu code that was deprecated in WP 4.5 and filtered nonce token debug output to prevent XSS by admins.
#WordPress 4.4 includes new REST API but unless you can't wait to embed your content elsewhere I would wait for security patches in 4.4.1 ;)
#PluginUpdate (4.15.43): Improved brute-force patch, added Core Files to the Quick Scan list, added a nonce token to prevent CSRF by admins.
#PluginUpdate 4.15.40: New release improves the Brute-Force login patch with JavaScript verification, and a bug fix for the XMLRPC Patch.
#WordPress 4.2.4 fixes 3 cross-site scripting vulnerabilities, an SQL injection, a timing side-channel attack, and prevents locking of posts
#WordPress 4.2.3 fixes an XSS vulnerability and a Subscriber permissions exploit. Download this security update ASAP if you are running 4.2!
#MalwareUpdate (F7MEx): More threats have just been added to my definition updates. Please download the new definitions whenever available.
#PluginUpdate (4.15.30): New firewall option to black all access to the xmlrpc.php file, and also more improvements to the Quarantine.
#MalwareUpdate (F6TAK): Lots of new threats have been added to my definition updates this week. Also some important bug fixes.
#PluginUpdate (4.15.27): New version with a major bug fix for slow scans in WPMU, plus a correction for partial fixes causing corruption.
#MalwareUpdate (F6FJe): A few new threat have just been added to my latest definition updates.
#MalwareUpdate (F638j): A new variant of a back-door (PHP mailer) was sent in by Shawn Hilt and is now in my latest definition updates.
#MalwareUpdate (F5V9k): Another new threat just added to my latest definition updates. Download the update now or donate for auto-updates.
#MalwareUpdate (F5B9Q): A new threat was just added to my latest definition updates. Download the update now or donate for auto-updates.
#PluginUpdate (4.15.20): This new version has important security updates and bug fixes. Please update ASAP!