Thread Rating:
  • 1 Vote(s) - 5 Average
  • 1
  • 2
  • 3
  • 4
  • 5
Ex-Employee Hacks WPML WordPress Plugin Site and Spams Users
#1
Quote:Last night the web site for the WordPress Multilingual Plugin (WPML) WordPress plugin was hacked and users of the plugin started receiving receiving emails stating that the plugin is filled with vulnerabilities. According to WPML, this was caused by a ex-employee who left a backdoor in their site.

WPML is a plugin that allows you to add multilingual support to WordPress and according to their site is used by 600,000 users.

In a blog post by WPML developer Amir Helzer, the company explains that the hack and resulting spam emails were sent by an alleged ex-employee who left a backdoor in their site. Helzer went on to say that they have updated their site, rebuilt the code, and secured access to the admin account with 2FA.

Source: https://www.bleepingcomputer.com/news/se...ams-users/
[-] The following 1 user says Thank You to silversurfer for this post:
  • harlan4096
Reply


Forum Jump:


Users browsing this thread: 1 Guest(s)
[-]
Welcome
You have to register before you can post on our site.

Username/Email:


Password:





[-]
Recent Posts
AWZ Screen Recorder
AWZ Screen Recorder ...zevish — 11:05
Website X5 Go 2024.1
Website X5 Go 2024.1...zevish — 09:32
Apple's rules to allow third-party app ...
Apple has announ...alison30 — 09:28
Intel: Microsoft AI PCs need a Copilot K...
Microsoft hopes th...harlan4096 — 08:55
Synchredible 8 Professional Edition v8.2...
          Synchredib...zevish — 08:54

[-]
Birthdays
Today's Birthdays
No birthdays today.
Upcoming Birthdays
No upcoming birthdays.

[-]
Online Staff
Decimuss's profile Decimuss

>