RCE Attempts Against the Latest WordPress REST API Vulnerability

less than 1 minute read

<p>We are starting to see remote command execution (RCE) attempts trying to exploit the latest WordPress REST API Vulnerability.</p>

These RCE attempts started today after a few days of attackers (mostly defacers) rushing to vandalize as many pages as they could. The RCE attempts we are seeing in the wild do not affect every WordPress sites, only the ones using plugins that allow for PHP execution from within posts and pages.

Continue reading RCE Attempts Against the Latest WordPress REST API Vulnerability at Sucuri Blog.

Share on

Twitter Facebook Google+ LinkedIn

You may also enjoy

Spotlight on Women in Cybersecurity

less than 1 minute read

Sucuri is committed to helping women develop their careers in technology. On International Women’s Day, Sucuri team members share their insights into workin...

How to Add SSL & Move WordPress from HTTP to HTTPS

less than 1 minute read

Moving a WordPress website from HTTP to HTTPS should be a priority for any webmaster. Recent statistics show that over 33% of website administrators across ...

Hacked Website Trend Report – 2018

less than 1 minute read

We are proud to be releasing our latest Hacked Website Trend Report for 2018. This report is based on data collected and analyzed by the GoDaddy Security / ...

Fake Browser Updates Push Ransomware and Bank Malware

less than 1 minute read

Recently we came across a malicious campaign injecting scripts that push fake browser updates onto site visitors. This is what a typical fake update request...