Ex-Employee Hacks WPML WordPress Plugin Site and Spams Users
#1
Quote:Last night the web site for the WordPress Multilingual Plugin (WPML) WordPress plugin was hacked and users of the plugin started receiving receiving emails stating that the plugin is filled with vulnerabilities. According to WPML, this was caused by a ex-employee who left a backdoor in their site.

WPML is a plugin that allows you to add multilingual support to WordPress and according to their site is used by 600,000 users.

In a blog post by WPML developer Amir Helzer, the company explains that the hack and resulting spam emails were sent by an alleged ex-employee who left a backdoor in their site. Helzer went on to say that they have updated their site, rebuilt the code, and secured access to the admin account with 2FA.

Source: https://www.bleepingcomputer.com/news/se...ams-users/
[-] The following 1 user says Thank You to silversurfer for this post:
  • harlan4096
Reply


Forum Jump:


Users browsing this thread: 1 Guest(s)
[-]
Welcome
You have to register before you can post on our site.

Username/Email:


Password:





[-]
Recent Posts
Adobe Acrobat Reader DC 2025.001.20467
Adobe Acrobat Read...harlan4096 — 06:11
GFYI [Official] CheckMAL's AppCheck Pro...
tweet CheckMAL Secu...dhruv2193 — 17:10
Introducing Advanced Chat Privacy: Enhan...
Introducing Advanc...harlan4096 — 11:49
Brave 1.77.101
Release Channel 1....harlan4096 — 11:48
Opera118.0.5461.60
Hello! We are h...harlan4096 — 11:47

[-]
Birthdays
Today's Birthdays
avatar (50)steakelask
avatar (44)Termoplenka
Upcoming Birthdays
avatar (50)Toligo

[-]
Online Staff
mjcn19's profile mjcn19

>