WordPress: another vulnerability
This article is 9 years old — prices and terms may have changed.
WordPress users had barely caught their breath after the previous news of vulnerabilities in this CMS and the removal of the WP Marketplace plugin when a new problem was announced.
It is a vulnerability in the platform's API that allows the content of a site's pages or posts to be changed or deleted.
On top of that, an attacker can place their own links, advertising or even PHP code on a compromised page. The problem was fixed in version 4.7.2, released on 26 January 2017.
But information about the vulnerability was made public only seven days later. That was done so that users had the chance to install the update and give hackers no opportunity to attack.
Unfortunately, however, not all users managed to update WordPress in time, which led to more than 2 million pages being compromised by around twenty hacker groups.
Sucuri notesthat after break-ins in which the content of a site's pages is replaced, hackers move on to actions capable of harming the attacked site — leaving a virus or SEO spam there, for instance. WordPress is one of the most popular content management systems in the world but, unfortunately, not the most secure.
If you have chosen WordPress as the CMS for your site, you have to update it as soon as news of a new update appears.
And we, for our part, have minimised the risks for our customers. Because the data of every customer on our shared hosting servers is reliably isolated from the others, you can rest easy if a "neighbour" on the hosting is compromised: your information stays safe.