Attackers take advantage of a critical remote code execution flaw that affects over 600.000 sites WordPress. The vulnerability we mentioned in a previous post and concerns websites that run vulnerable versions of the File Manager plugin.
Critical Vulnerability allows unauthorized users to upload malicious PHP files and run malicious code. The File Manager developer team addressed the issue with the release of File Manager 6.9.
Although the flaw was fixed immediately when developers were notified by Seravo security chief Ville Korhonen, who discovered the 0day and the ongoing attacks that were trying to exploit it, researchers from the security company Defiant identified more than 1,7 million vulnerable 1st to 3rd of September.
In an updated report released today, Defiant threat analyst Ram Gall states that hackers have not stopped their "siege", and the total number of sites with WordPress targeted, has reached 2,6 million.
Zoom: adds 2FA support to all accounts
Comment Policy:
IGuRu.gr does not post comments directly. Malicious comments, comments that include ads, or comments with insults are deleted without any notice. We do not adopt the views expressed by our readers.
Your comments will be displayed after approval by the administrators