Wordpress being exploited

devkareem · Dec 16, 2018

To whom it may concern Wordpress is facing 7 high-risk vulnerabilities and they are being exploited in the wild. If you are running wordpress i advise you to update everything RIGHT NOW and check your server logs for anything suspicious!

https://www.searchenginejournal.com/7-wordpress-vulnerabilities/283107/
https://wordpress.org/news/2018/12/wordpress-5-0-1-security-release/

Deleted member 601870 · Dec 16, 2018

PBN owners once check your blogs before its too late and google marks ( site has been hacked)
3 of my clients network got affected.

KamBhai · Dec 16, 2018

Yep update is required or else site is maked as harmful in Google.

negon · Dec 16, 2018

Thank you very much, just updating my wp!

exeQutor · Dec 16, 2018

Always upgrade your WordPress sites whenever there are updates available!

devkareem · Dec 16, 2018

exeQutor said:
Always upgrade your WordPress sites whenever there are updates available!

You plugins too! Woocommerce found vulnerable as well!

KamBhai said:
Yep update is required or else site is maked as harmful in Google.

Check all links on your website, There is a online illegal drug store that hacked hundreds of websites to backlink their site.

Thanks for @magicjones for pointing it out.

Daniel Ocean · Dec 16, 2018

Th3 Technician said:
You plugins too! Woocommerce found vulnerable as well!

Check all links on your website, There is a online illegal drug store that hacked hundreds of websites to backlink their site.

Thanks for @magicjones for pointing it out.

Did you know the link for the illegal drug store? I would like to see.

devkareem · Dec 16, 2018

Daniel Ocean said:
Did you know the link for the illegal drug store? I would like to see.

Edit: I will just publish it, everyone put that link in google beside your domain to find if they already hacked you or not.

i49.net

davids355 · Dec 16, 2018

Thanks for the heads up. Will have to go on a Wordpress updating spree.

devkareem · Dec 16, 2018

davids355 said:
Thanks for the heads up. Will have to go on a Wordpress updating spree.

My pleasure. Is posting their link fine?

InnovativeSEO · Dec 16, 2018

I don't see why not. Thank you for posting this, it's important.

hashem_wpd · Dec 16, 2018

I have updated my personal website. Thanks for your advice and precious time.

Daniel Ocean · Dec 16, 2018

Th3 Technician said:
Edit: I will just publish it, everyone put that link in google beside your domain to find if they already hacked you or not.

i49.net

I see... I was thinking is something similar to black hat stores from TOR browser. They accept bitcoin as payment method so I'm wondering if this site is a complet scam or they really ship the products.

devkareem · Dec 16, 2018

Daniel Ocean said:
I see... I was thinking is something similar to black hat stores from TOR browser. They accept bitcoin as payment method so I'm wondering if this site is a complet scam or they really ship the products.

It wouldnt be beneficial if it was a .onion sites. I don't think someone would buy a domain like that (registered since 2003!) to run a scam. yh they probably working but will exit-scam at some point like always :3

devkareem · Dec 16, 2018

https://wpvulndb.com/

List of sites hacked by i49.net:
https://www.google.com/search?q=inurl:".php%3Faction%3D2"+intext:"i49.net"

terrycody · Dec 16, 2018

I am wondering if keep WP version at 4.9 is a good practice ?

devkareem · Dec 16, 2018

terrycody said:
I am wondering if keep WP version at 4.9 is a good practice ?

NO

From wordpress.org:

WordPress versions 5.0 and earlier are affected by the following bugs, which are fixed in version 5.0.1. Updated versions of WordPress 4.9 and older releases are also available, for users who have not yet updated to 5.0.

Akieasendo · Dec 16, 2018

What a mess. Basically if I update to 5.1 I lose all of my plugins because many plugins are not yet ready for Wordpress 5, If I don't update I get hacked... nice job wordpress

devkareem · Dec 17, 2018

Akieasendo said:
What a mess. Basically if I update to 5.1 I lose all of my plugins because many plugins are not yet ready for Wordpress 5, If I don't update I get hacked... nice job wordpress

Somehow yes :/

legion85 · Dec 17, 2018

It took me 6 months to create an awesome WooCommerce site. I had to modify the theme, wordpress files, woocommerce files etc. If I update either one of them, the whole thing collapses.

I'm hoping that Wordfence, Cloudflare and correct permissions on the server will be enough for avoiding hackers, for at least a year.

Wordpress being exploited

Power Member

Deleted member 601870

Guest

Elite Member

BANNED

Junior Member

Power Member

Newbie

Power Member

Super Moderator

Power Member

Senior Member

Regular Member

Newbie

Power Member

Power Member

Elite Member

Power Member

Regular Member

Power Member

Supreme Member

Main Menu

Marketplace

Making Money

BlackHat World