Over the past few weeks numerous serious security vulnerabilities have been found in WordPress plugins. Many of the vulnerabilities allow arbitrary file uploads, which can be used to add a backdoor
Category: Website Security
Last week we mentioned that we had found that a WordPress plugin that had a security vulnerability in its current version, that had recently been attempted to be exploited, had remained in the Word
Use this tool to search for a specific file type in a given domain – inspired by TheHarvester. Usage ./goofile.py -d test.com -f txt -d: domain to search -f: filetype (ex. pdf) Written in Pyt
While reviewing recent logs for attempts to exploit WordPress plugins, for another post on this blog, we spotted one plugin that seemed out of place. While nearly all of the exploit attempts involv