Wordpress being exploited

[devkareem]

To whom it may concern Wordpress is facing 7 high-risk vulnerabilities and they are being exploited in the wild. If you are running wordpress i advise you to update everything RIGHT NOW and check your server logs for anything suspicious!

https://www.searchenginejournal.com/7-wordpress-vulnerabilities/283107/
https://wordpress.org/news/2018/12/wordpress-5-0-1-security-release/

 

[Deleted member 601870]

PBN owners once check your blogs before its too late and google marks ( site has been hacked)
3 of my clients network got affected.

 

[KamBhai]

Yep update is required or else site is maked as harmful in Google.

 

[negon]

Thank you very much, just updating my wp!

 

[exeQutor]

Always upgrade your WordPress sites whenever there are updates available!

 

[devkareem]

Always upgrade your WordPress sites whenever there are updates available!

You plugins too! Woocommerce found vulnerable as well!

Yep update is required or else site is maked as harmful in Google.

Check all links on your website, There is a online illegal drug store that hacked hundreds of websites to backlink their site.

Thanks for @magicjones for pointing it out.

 

[Daniel Ocean]

You plugins too! Woocommerce found vulnerable as well!



Check all links on your website, There is a online illegal drug store that hacked hundreds of websites to backlink their site.

Thanks for @magicjones for pointing it out.

Did you know the link for the illegal drug store? I would like to see.

 

[devkareem]

Did you know the link for the illegal drug store? I would like to see.

Edit: I will just publish it, everyone put that link in google beside your domain to find if they already hacked you or not.

i49.net

 

[davids355]

Thanks for the heads up. Will have to go on a Wordpress updating spree.

 

[devkareem]

Thanks for the heads up. Will have to go on a Wordpress updating spree.

My pleasure. Is posting their link fine?

 

[InnovativeSEO]

I don't see why not. Thank you for posting this, it's important.

 

[hashem_wpd]

I have updated my personal website. Thanks for your advice and precious time.

 

[Daniel Ocean]

Edit: I will just publish it, everyone put that link in google beside your domain to find if they already hacked you or not.

i49.net

I see... I was thinking is something similar to black hat stores from TOR browser. They accept bitcoin as payment method so I'm wondering if this site is a complet scam or they really ship the products.

 

[devkareem]

I see... I was thinking is something similar to black hat stores from TOR browser. They accept bitcoin as payment method so I'm wondering if this site is a complet scam or they really ship the products.

It wouldnt be beneficial if it was a .onion sites. I don't think someone would buy a domain like that (registered since 2003!) to run a scam. yh they probably working but will exit-scam at some point like always :3

 

[devkareem]

https://wpvulndb.com/


List of sites hacked by i49.net:
https://www.google.com/search?q=inurl:".php%3Faction%3D2"+intext:"i49.net"​

 

[terrycody]

I am wondering if keep WP version at 4.9 is a good practice ?

 

[devkareem]

I am wondering if keep WP version at 4.9 is a good practice ?

NO

From wordpress.org:

WordPress versions 5.0 and earlier are affected by the following bugs, which are fixed in version 5.0.1. Updated versions of WordPress 4.9 and older releases are also available, for users who have not yet updated to 5.0.

 

[Akieasendo]

What a mess. Basically if I update to 5.1 I lose all of my plugins because many plugins are not yet ready for Wordpress 5, If I don't update I get hacked... nice job wordpress

 

[devkareem]

What a mess. Basically if I update to 5.1 I lose all of my plugins because many plugins are not yet ready for Wordpress 5, If I don't update I get hacked... nice job wordpress

Somehow yes :/

 

[legion85]

It took me 6 months to create an awesome WooCommerce site. I had to modify the theme, wordpress files, woocommerce files etc. If I update either one of them, the whole thing collapses.

I'm hoping that Wordfence, Cloudflare and correct permissions on the server will be enough for avoiding hackers, for at least a year.