WordPress plugin puts users at phishing risk

Topic

New Reply

BleepingComputer reports that a WordPress plugin flaw puts users of 20,000 sites at phishing risk.

 

https://www.bleepingcomputer.com/news/security/wordpress-plugin-flaw-puts-users-of-20-000-sites-at-phishing-risk/

Reply | Quote

Replies

That relates to a mail plug-in, not used here 🙂

2 users thanked author for this post.

OscarCP, Kathy Stevens

Reply | Quote

All email on the site is sent through the same mail hoster that does the free newsletters of sendgrid.  I have to log in with two factor to access the console.  We “decouple” (for lack of a better term) the site from the wordpress engine and hook in straight to a specialist in mail for all messages, comments, etc that you get via the site.  Like Kirsty says, that plug in is not used here.

Susan Bradley Patch Lady/Prudent patcher

3 users thanked author for this post.

Mele20, Alex5723, OscarCP

Reply | Quote

PHP backdoors have been discovered on 40 themes and 53 plugins for WordPress belonging to AccessPress.

https://jetpack.com/2022/01/18/backdoor-found-in-themes-and-plugins-from-accesspress-themes/

1 user thanked author for this post.

Microfix

Reply | Quote