Wordfence @wordfence Twitter profile

Last Seen Profiles

@JiwaRumah

@autumnbb11

@phqqqq

@Twillingate_NL

@K000ac

@Peshitbot

@chrisparchwell

@recklessthrill_

@stw46

@ProfDerekBailey

@lady91101521

@bokeplokalmalam

@PolarCrd

@Aleks_Knows

@andre_kyanga

@luvextractor

@SupremelyChris

@Punta_Lanza

@ellaloveslifee

@lascari_tony

@BinorRaja

@xadamx6511

@leviet2008

@Tandho_

@PriaSej12601518

@habel007

@PicsRena

@stw46

@tatteddbeautiii

@samedaslan

@jdvmrr

@MurmadM

@bader222abha

@roberto_bayardo

@WickedU2

@NYRORmQLMf88858

Wordfence

@wordfence

10 months

Earn up to $10,000 for finding Vulnerabilities in WordPress Software. For the next 20 days, we have added a 6.25X multiplier to all bug bounties, starting NOW. These are some of the highest payouts for finding vulnerabilities in the history of WordPress. If you're a vulnerability

5

32

270

Wordfence

@wordfence

3 years

(New Blog Post) PSA: Widespread Remote Working Scam Underway

4

25

154

Wordfence

@wordfence

8 years

Updated a highly cited post (WSJ this week). Chrome & Google have done a fine job of mitigating data URL phishing.

Wide Impact: Highly Effective Gmail Phishing Technique Being Exploited

A new phishing technique that affects GMail and other services and how to protect yourself.

www.wordfence.com

3

42

118

Wordfence

@wordfence

3 years

We're incredibly excited to announce the launch of two new products, Wordfence Care and Wordfence Response. Check out our fun animation below which explains our newly expanded product lineup. You can find the full announcement on our blog:

12

16

77

Wordfence

@wordfence

3 years

Effective immediately, Wordfence has deployed real-time threat intelligence (normally a paid only feature) to over 8,000 sites running the Free version of Wordfence on the .UA top-level domain. This will auto-update - no site change or work needed. Also:

Ukraine Universities Hacked As Russian Invasion Started

Note: This article has been updated to reflect that the hosting provider “Njalla”, which routed the malicious traffic involved in this attack, is based in Sweden, not in Finland, although IP geoloc...

www.wordfence.com

3

26

56

Wordfence

@wordfence

4 years

So, @infosecchloe tried to live hack @wfScottMiller 's WordPress blog on Tuesday during Wordfence Office Hours, and she got an unexpected surprise. Check it out here: #WP #WordPress #infosec #cybersecurity #hacking #security #PHP #CSRF #exploits

Chloe gets a surprise while hacking WordPress

Chloe Chamberland - @infosecchloe - was doing a hacking demo at Wordfence office hours on Tuesday June 2nd, trying to hack Scott's blog, when she got a littl...

www.youtube.com

1

11

49

Wordfence

@wordfence

3 years

Wordfence in Partnership with Far Away Friends just completed a project to provide sustainable solar powered light and electricity to a school campus in Uganda. To read the full story about this amazing project and see a short video, please visit

3

11

50

Wordfence

@wordfence

3 years

GoDaddy Breached – Plaintext Passwords – 1.2M Affected

GoDaddy Breached - Plaintext Passwords - 1.2M Affected

There is an update available here: GoDaddy Breach Widens to tsoHost, Media Temple, 123Reg, Domain Factory, Heart Internet, and Host Europe This morning, GoDaddy disclosed that an unknown attacker had...

www.wordfence.com

3

40

51

Wordfence

@wordfence

3 years

We're Now Blocking 10,000 Requests Per Hour in Ukraine From Known Malicious IPs

48 hours ago we deployed our commercial real-time threat intelligence automatically, and for free, to all Ukrainian websites with the .UA top-level domain. That has made over 8,000 sites in Ukraine...

www.wordfence.com

4

20

45

Wordfence

@wordfence

4 years

An update: @elemntor has released Pro version 2.9.4, and our threat intelligence team has verified it fixes the authenticated file upload vulnerability. Please ensure you update your Elementor Pro plugins to 2.9.4. Kudos to Elementor for the fast fix.

Wordfence

@wordfence

4 years

Combined Attack on Elementor Pro and Ultimate Addons for Elementor Puts 1 Million Sites at Risk

3

24

28

2

24

40

Wordfence

@wordfence

4 years

This afternoon, the official Trump campaign website was hacked and defaced. We have examined the site configuration and possible intrusion vectors, and our team has published what we know about this compromise, and lessons learned.

0

21

36

Wordfence

@wordfence

7 years

Backdoor in Captcha Plugin Affects 300K WordPress Sites

The WordPress repository recently removed the plugin Captcha over what initially appeared to be a trademark issue with the current author using “WordPress” [Editors note: the original page has been...

www.wordfence.com

1

56

36

Wordfence

@wordfence

2 years

We've officially launched Wordfence Intelligence Community Edition: an entirely free vulnerability database API and web interface for commercial use by hosting companies, security organizations, threat analysts, security researchers, and the WordPress user community.

4

14

34

Wordfence

@wordfence

4 years

Moments ago, the Wordfence Threat Intelligence team published details about a Cross-Site Scripting vulnerability discovered in the WPBakery plugin which is installed on over 4 million sites.

Vulnerability Exposes Over 4 Million Sites Using WPBakery

On July 27th, our Threat Intelligence team discovered a vulnerability in WPBakery, a WordPress plugin installed on over 4.3 million sites. This flaw made it possible for authenticated attackers with...

www.wordfence.com

1

30

38

Wordfence

@wordfence

4 years

28,000 GoDaddy Hosting Accounts Compromised

This is a public service announcement (PSA) from the Wordfence team regarding a security issue which may impact some of our customers. On May 4, 2020, GoDaddy, one of the world’s largest website...

www.wordfence.com

1

33

35

Wordfence

@wordfence

7 years

Breaking: Aggressive WordPress Brute Force Attack Campaign Started Today, 3am UTC

2

44

28

Wordfence

@wordfence

3 years

Today, we are excited to announce that Wordfence is authorized by the Common Vulnerabilities and Exposures (CVE®) Program as a CNA, or CVE Numbering Authority. Find out what this means for our customers on the official Wordfence blog.

Wordfence is now a CVE Numbering Authority (CNA)

Today, we are excited to announce that Wordfence is authorized by the Common Vulnerabilities and Exposures (CVE®) Program as a CNA, or CVE Numbering Authority. As a CNA, Wordfence can now assign CVE...

www.wordfence.com

4

12

35

Wordfence

@wordfence

2 years

Our new product, Wordfence Intelligence, is officially here. Check out our animation to explore our biggest, most exciting product yet. For more information, visit:

2

6

32

Wordfence

@wordfence

3 years

GoDaddy Breach Widens to tsoHost, Media Temple, 123Reg, Domain Factory, Heart Internet, and Host...

Yesterday GoDaddy disclosed a massive data breach impacting over 1.2 Million customers. Today, we received confirmation from GoDaddy that multiple brands that resell GoDaddy Managed WordPress were...

www.wordfence.com

0

19

32

Wordfence

@wordfence

3 years

GoDaddy breached. Affects 1.2M customers. More on this shortly.

0

28

30

Wordfence

@wordfence

3 years

The Wordfence website will be undergoing maintenance this morning starting at 7am Pacific, 10am Eastern and 3pm UTC/GMT. This window starts in 30 mins and will last 1 to 2 hours. Plugins are unaffected. Updates will be provided here. Get ready for a major announcement.

3

4

30

Wordfence

@wordfence

4 years

Over the weekend, two malicious commits were pushed to a development version of PHP. Moments ago, our Threat Intelligence team published an analysis of what happened & what this means to WordPress.

0

17

29

Wordfence

@wordfence

4 years

Moments ago, the Wordfence Threat Intelligence team posted details of a critical zero-day file upload vulnerability patched in the WooCommerce Upload Files plugin. This vulnerability allowed Remote Code Execution and site takeover.

Critical Vulnerability Patched in WooCommerce Upload Files

A 0-day file upload vulnerability in a premium add-on for WooCommerce allowed Remote Code Execution and site takeover.

www.wordfence.com

0

18

30

Wordfence

@wordfence

1 year

So we just launched Wordfence CLI, an absolutely killer high performance command line malware scanner from #WCUS a few seconds ago. Come say hi if you’re in the room. This is a game changer for devs, hosting providers and anyone scripting #wordpress malware scanning at scale.

3

6

29

Wordfence

@wordfence

4 years

Our Threat Intelligence Team just published details of numerous Cross-Site Scripting vulnerabilities discovered in the Elementor plugin, installed on over 7 million WordPress sites. Details on the official Wordfence blog.

Cross-Site Scripting Vulnerabilities in Elementor Impact Over 7 Million Sites

Any user able to access the Elementor page builder could inject malicious JavaScript, potentially leading to site takeover.

www.wordfence.com

2

20

28

Wordfence

@wordfence

4 years

One day after releasing WordPress 5.5.2, a security and maintenance release, the WordPress core team has released WordPress 5.5.3, an emergency release. What happened and what this means for your sites on the official Wordfence blog.

Emergency WP 5.5.3 Release

The WordPress core team has released an emergency release of WordPress 5.5.3, just one day after the release of version 5.5.2. This emergency release was done to remedy an issue introduced in...

www.wordfence.com

0

26

28

Wordfence

@wordfence

7 years

Massive Cryptomining Campaign Targeting WordPress Sites

1

34

24

Wordfence

@wordfence

4 years

Combined Attack on Elementor Pro and Ultimate Addons for Elementor Puts 1 Million Sites at Risk

3

24

28

Wordfence

@wordfence

3 years

Most commonly used work phrase in 2021: You’re on mute.

0

5

24

Wordfence

@wordfence

4 years

Moments ago, the Wordfence Threat Intelligence team published details about 4 vulnerabilities discovered in Ninja Forms, a plugin installed on over 1 million WordPress sites.

One Million Sites Affected: Four Severe Vulnerabilities Patched in Ninja Forms

On January 20, 2021, our Threat Intelligence team responsibly disclosed four vulnerabilities in Ninja Forms, a WordPress plugin used by over one million sites. One of these flaws made it possible for...

www.wordfence.com

0

17

25

Wordfence

@wordfence

1 year

Arrived in DC. In case you’re at #WCUS and don’t know what the Wordfence founders look like, this is Kerry and me. Selfie in a mirror this evening. Please say hi if you see us, or stop by the Wordfence booth!! 😁

1

0

26

Wordfence

@wordfence

4 years

Moments ago, we published details about a critical vulnerability discovered in two themes by Elegant Themes, Divi and Extra, as well as the Divi Builder plugin. Combined, these products are installed on an estimated 700,000 sites. #divi

Critical Vulnerability Exposes over 700,000 Sites Using Divi, Extra, and Divi Builder

On July 23, 2020, our Threat Intelligence team discovered a vulnerability present in two themes by Elegant Themes, Divi and Extra, as well as Divi Builder, a WordPress plugin. Combined, these...

www.wordfence.com

0

18

26

Wordfence

@wordfence

6 years

Peculiar PHP Present In Popular Pipdig Power Pack (P3) Plugin

This week, our team was notified of suspicious code present in a plugin offered alongside themes sold by Pipdig, a UK-based web development team. The user, who wishes to remain anonymous, reached out...

www.wordfence.com

4

21

25

Wordfence

@wordfence

3 years

Our customers LOVE Wordfence Care & Wordfence Response! Congrats everyone who has upgraded from Premium, or bought a new Care or Response license and is benefiting from unlimited hands-on support, incident response, and the Wordfence Team monitoring your site security. 🔒🥳🎈🎊

2

6

22

Wordfence

@wordfence

3 years

TSOHost also breached. More on the Wordfence blog shortly. Very similar announcement to GoDaddy and owned by them. Investigating other related hosts now. DM @ramuelgall to send us a lead. Thanks.

2

13

22

Wordfence

@wordfence

8 years

New information! US Govt Data Shows Russia Used Outdated Ukrainian PHP Malware See what Wordfence discovered.

US Govt Data Shows Russia Used Outdated Ukrainian PHP Malware

Update at 1am Pacific Time, Monday morning Jan 2nd: Please note that we have published a FAQ that accompanies this report. It contains a summary of our findings and answers several other questions...

www.wordfence.com

6

28

20

Wordfence

@wordfence

4 years

WordPress 5.5 is scheduled to be released next week, including a new feature that allows site owners to enable automatic updates of plugins & themes whenever a new version is released. Should you use this feature? We've detailed our recommendations.

WordPress Auto-Updates: What do you have to lose?

A new feature that will allow automatic updating of plugins and themes will be available in WordPress version 5.5, which is scheduled to be released on August 11, 2020. In this core release of the...

www.wordfence.com

2

15

23

Wordfence

@wordfence

5 years

Good morning, WordCamp Minneapolis! We're ready to teach you lock picking and talk WordPress security. Stop by and say hi to Tim, Scott and Kathy at our table! @WordCampMpls #WCMSP

1

4

22

Wordfence

@wordfence

1 year

We've been made aware that a WAF Rule we deployed today has unfortunately caused some sites to get a 500 error. We've implemented a fix on our side to prevent the issue from occurring on sites that have not yet been updated and we are continuing to work on a fix for sites that

7

10

22

Wordfence

@wordfence

5 years

We're ready for you, WordCamp NYC! Come meet some of the brightest minds in WordPress security at our sponsor booth. Meet @scottbisker , @poutine_hero , @infosecchloe , and @tcan1337 . We've got lock picking, great swag, & answers to your security questions. #WCNYC @wordcampNYC

1

3

23

Wordfence

@wordfence

3 years

Moments ago, the Wordfence Threat Intelligence Team published details of patched vulnerabilities affecting more than 15 of the most popular addon plugins for Elementor, which are collectively installed on over 3.5 million sites.

Recent Patches Rock the Elementor Ecosystem

We found similar vulnerabilities in more than 15 of the most popular addons for Elementor, collectively impacting over 3.5 Million Sites

www.wordfence.com

0

10

22

Wordfence

@wordfence

4 years

Defiant, the team that makes Wordfence, is now listed on the Privacy Shield certification list! Congratulations to our team who worked hard to make this possible.

Wordfence and GDPR - General Data Protection Regulation - Wordfence

Defiant, the company behind Wordfence, has updated its terms of use, privacy policies and software, as well as made available standard contractual clauses to meet GDPR compliance. Customers must...

www.wordfence.com

5

9

22

Wordfence

@wordfence

6 years

Hackers Abusing Recently Patched Vulnerability In Easy WP SMTP Plugin

Over the weekend, a vulnerability was disclosed and patched in the popular WordPress plugin Easy WP SMTP. The plugin allows users to configure SMTP connections for outgoing email, and has a userbase...

www.wordfence.com

1

12

22

Wordfence

@wordfence

2 years

We've compiled the most common exploit attempt types broken down by the firewall rule used to block the attempt. 1. SQL Injection 2. wp-config.php Traversal 3. Directory Traversal 4. XSS 5. Local File Inclusion Do any of them surprise you? #WordPress #cybersecuritytips #SQLI

3

8

22

Wordfence

@wordfence

4 years

Earlier today, a security patch was released for arguably the most widely used WordPress plugin, Contact Form 7. Our analysis of this file upload vulnerability is on the official Wordfence blog.

A Challenging Exploit: The Contact Form 7 File Upload Vulnerability

File Upload vulnerability in Contact Form 7 may be difficult to exploit, but you should still update as soon as possible.

www.wordfence.com

1

25

23

Wordfence

@wordfence

7 years

New Feature Protects Against Password Leak Attacks

2

14

21

Wordfence

@wordfence

2 years

WordPress 6.0.3 is now available! Our Threat Intelligence team is assessing the impact but we highly recommend ensuring your site has been updated if you haven’t already done so.

2

3

19

Wordfence

@wordfence

6 years

Pipdig Update: Dishonest Denials, Erased Evidence, and Ongoing Offenses

In last week’s post, we reported on some concerning code identified in the Pipdig Power Pack (P3) plugin. The plugin, which is installed alongside WordPress themes sold by Pipdig, was found to...

www.wordfence.com

3

16

21

Wordfence

@wordfence

8 years

Read from the bottom. #wordpress #REST API exploit #fail . #WP #security

2

6

21

Wordfence

@wordfence

2 years

Update your Chrome browsers immediately. A new release just went out to fix a zero day vulnerability. An exploit for this vulnerability exists in the wild. Update Chrome now.

Stable Channel Update for Desktop

The Stable channel has been updated to 100.0.4896.127 for Windows, Mac and Linux which will roll out over the coming days/weeks. A full li...

chromereleases.googleblog.com

0

17

18

Wordfence

@wordfence

3 years

Severe vulnerabilities have been patched in Simple 301 Redirects by BetterLinks, a plugin used by over 300,000 WordPress sites. Some of these vulnerabilities made it possible for unauthenticated attackers to redirect all of a site’s visitors.

0

12

19

Wordfence

@wordfence

3 years

"These flaws made it possible for an attacker to export sensitive information and send arbitrary emails from a vulnerable site that could be used to phish unsuspecting users."

Recently Patched Vulnerabilities in Ninja Forms Plugin Affect Over 1 Million Site Owners

On August 3, 2021 the Wordfence Threat Intelligence team initiated the responsible disclosure process for two vulnerabilities that were discovered in Ninja Forms, a WordPress plugin installed on over...

www.wordfence.com

2

12

22

Wordfence

@wordfence

5 years

WordCamp Harare in Zimbabwe took place this weekend, too. Mark Maunder did a livestream video with WC Harare and visited a few sponsor booths at WordCamp US including Yoast. Watch for our video coming soon! #WCUS #WCHRE @mmaunder @wordcampharare @yoast

2

6

21

Wordfence

@wordfence

4 years

We are seeing a dramatic rise in attacks against the vulnerability in the File Manager plugin found earlier this week. Today alone, as of 9AM Pacific Time, Wordfence has already recorded attacks against over 1 million sites.

Millions of Sites Targeted in File Manager Vulnerability Attacks

The Wordfence Threat Intelligence team is seeing a dramatic increase in attacks targeting the recent 0-day in the WordPress File Manager plugin. This plugin is installed on over 700,000 WordPress...

www.wordfence.com

1

24

22

Wordfence

@wordfence

8 months

We worked with Greg at @gregxsunday to create an awesome technical guide to hacking WordPress to discover vulnerabilities! You can earn money by submitting new vulnerabilities to the Wordfence Bug Bounty Program: 6.25x Bounties Right Now 🔥

Bug Bounty Program — Wordfence Intelligence

www.wordfence.com

Bug Bounty Reports Explained

@gregxsunday

8 months

WordPress powers about 40% of the websites today so finding a bug in it or in a popular plugin can have significant impact. In my latest video, I tell you how to start analyzing a WordPress plugin and the methods to monetize bugs that you will find Enjoy!

0

22

129

0

3

24

Wordfence

@wordfence

2 years

Our team responsibly disclosed two vulnerabilities in All In One SEO, a WordPress plugin installed on over 3M sites. We issued a firewall rule to protect against the more severe vulnerability, which is available to all Wordfence users as of 2/24.

0

5

20

Wordfence

@wordfence

5 years

We've updated this post to confirm that Duplicator Pro installations are also affected by this vulnerability. We estimate about 170,000 WordPress sites are running Duplicator Pro; approximately150,000 of these sites have not been patched.

Active Attack on Recently Patched Duplicator Plugin Vulnerability Affects Over 1 Million Sites

Description: Unauthenticated Arbitrary File Download Affected Plugin: Duplicator Affected Versions: <= 1.3.26 CVE ID: CVE-2020-11738 CVSS Score: 7.5 (High) CVSS Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N...

www.wordfence.com

0

16

21

Wordfence

@wordfence

4 years

Our Threat Intelligence team found a vulnerability in the Contact Form 7 Style plugin installed on 50K+ sites. This vulnerability remains unpatched & the plugin is now closed. We've withheld full details, but we've shared steps to keep your site safe.

Unpatched Vulnerability: 50,000 WP Sites Must Find Alternative for Contact Form 7 Style

On December 9, 2020, the Wordfence Threat Intelligence team discovered a Cross-Site Request Forgery (CSRF) to Stored Cross Site Scripting (XSS) vulnerability in Contact Form 7 Style, a WordPress...

www.wordfence.com

1

10

21

Wordfence

@wordfence

5 years

Here's a short clip from our Zoom chat with friends at @wordcampharare in Zimbabwe when we visited the @jetpack booth at @WordCampUS . We had much fun connecting WordPress users across continents; thanks to everyone who participated! The full video is coming soon. #WCUS #WCHRE

1

8

21

Wordfence

@wordfence

8 years

Massive increase in brute force #attacks on #wordpress sites during past 18 hours. Will exceed 60 day peak today by 25%. #security #wp

0

21

16

Wordfence

@wordfence

3 years

2021 Mid-Year WordPress Security Report: A Collaboration Between Wordfence and WPScan

Wordfence has collaborated with WPScan to conduct a 2021 mid-year review on the state of WordPress security. Using attack data from Wordfence’s internal threat intelligence platform, and vulnerabil...

www.wordfence.com

1

10

21

Wordfence

@wordfence

2 years

Wordfence Launches Wordfence Intelligence for Hosts and Network Defenders! #blackhat #vegas #informationsecurity

Wordfence Launches Wordfence Intelligence for Hosts and Network Defenders

This morning the Wordfence team is launching Wordfence Intelligence live at Black Hat 2022 in Las Vegas. Our entire team is here in Las Vegas, including our international team members. I’d like to...

www.wordfence.com

0

5

20

Wordfence

@wordfence

3 years

WordPress 5.8.3 Security Release

On January 6, 2022, the WordPress core team released WordPress version 5.8.3, which contains security patches for 4 high-severity vulnerabilities. These patches were backported to every version of...

www.wordfence.com

0

11

21

Wordfence

@wordfence

7 years

Chrome and Firefox Phishing Attack Uses Domains Identical to Known Safe Sites #chrome #firefox #phishing

4

39

16

Wordfence

@wordfence

5 years

PSA: If you're one of the 4 million Elementor users, update ASAP as a cross-site scripting vulnerability was found in versions 2.8.4 and earlier; the proof of concept has been published by the researcher. (CVE-2020-8426) #pluginvulnerabilities #update #infosec

0

13

20

Wordfence

@wordfence

5 years

We had a great time sponsoring WordCamp Orange County! Thanks to the organizers, the attendees, the speakers, and all of the volunteers who made this spectacular event possible! #wcoc @OCWordCamp

Stephen Harvey - WP Evangelist🗣⛪

@SC_WordPress

5 years

This is definitely a highlight of my #WCOC experience! Awesome finally meeting @mmaunder and @danmoen of @wordfence ... AND, getting to see @kathyzant is always a bonus too.🤩🤩🤩🤩🤩🤩🔐🔐🔐 #security

1

2

16

2

1

20

Wordfence

@wordfence

3 years

On July 14, WooCommerce released a patch for a SQL Injection vulnerability that allowed unauthenticated attackers to access arbitrary data in a store’s database. Moments ago, the Wordfence Threat Intelligence team posted a deeper look at the vulnerability.

Critical SQL Injection Vulnerability Patched in WooCommerce

The WooCommerce vulnerability allowed attackers to access sensitive data. WordPress has used automatic updates to patch impacted sites.

www.wordfence.com

2

15

19

Wordfence

@wordfence

3 years

Just sent an urgent email to our WordPress security list about the log4j vulnerability with a bunch of resources. We're not blogging about it because it's not our wheelhouse, but I'm pasting the email here for our Java friends to help them get secure fast. This is Javageddon.

1

6

18

Wordfence

@wordfence

3 years

Sunset in the Salish Sea.

1

0

17

Wordfence

@wordfence

5 years

Podcast Episode 55: Yoast’s Marieke van de Rakt & Michiel Heijmans at WordCamp US

Podcast Episode 55: Yoast's Marieke van de Rakt & Michiel Heijmans at WordCamp US

At WordCamp US in Saint Louis, Mark sat down with Yoast CEO Marieke van de Rakt and COO Michiel Heijmans in the Wordfence booth to talk about not only how Yoast began, but also how they’ve grown to...

www.wordfence.com

1

3

20

Wordfence

@wordfence

8 months

WordPress v6.4.3 released addressing two minor security concerns in Core. 1st patch secures file upload, mainly concerning to locked-down configurations. 2nd improves option storage sanitization. Both issues low-risk unless site installation is incomplete.

The WordPress 6.4.3 Security Update - What You Need to Know

Today, January 30, 2024, WordPress released version 6.4.3, which contains two security patches for longstanding, albeit minor, security concerns in WordPress Core. The first patch addresses an issue...

www.wordfence.com

0

10

18

Wordfence

@wordfence

4 years

Our Threat Intelligence Team found a vulnerability in The Official Facebook Chat Plugin, used by 80,000 WP sites. This vulnerability allowed attackers to connect their own Facebook Messenger account to sites running the vulnerable plugin.

The Official Facebook Chat Plugin Created Vector for Social Engineering Attacks

On June 26, 2020, our Threat Intelligence team discovered a vulnerability in The Official Facebook Chat Plugin, a WordPress plugin installed on over 80,000 sites. This flaw made it possible for...

www.wordfence.com

0

12

19

Wordfence

@wordfence

10 months

🚨Alert to all WordPress users! Beware of the latest phishing scam using fake CVE-2023-45124. This scheme lures users into installing a backdoor plugin. #WordPress #WP #CyberSecurity

0

10

20

Wordfence

@wordfence

5 years

We're having a great time at WordCamp Kansas City this weekend, and we're excited about Jim Grant's @SimplyMediaKC WordPress security talk in 30 minutes. Will we see you there? @wordcampkc #wckc #wordcampkc

0

2

19

Wordfence

@wordfence

2 years

That’s a wrap on Black Hat 2022! A huge thanks to everyone who stopped by our booth to learn about our new product, Wordfence Intelligence. We look forward to helping make the online community safer. #blackhat2022 #BlackHat #WordPress

0

6

19

Wordfence

@wordfence

7 years

PSA: Replace Your SSL/TLS Certs by Symantec, Thawte, VeriSign, Equifax, GeoTrust and RapidSSL

0

19

18

Wordfence

@wordfence

5 years

Site Takeover Campaign Exploits Multiple Zero-Day Vulnerabilities

Early yesterday, the Flexible Checkout Fields for WooCommerce plugin received a critical update to patch a zero-day vulnerability which allowed attackers to modify the plugin’s settings. As our...

www.wordfence.com

0

12

19

Wordfence

@wordfence

8 years

Expect a WP core security update in the near future. A vuln in phpmailer that affects core was announced. #WP #wordpress #security #infosec

1

15

16

Wordfence

@wordfence

7 years

Three Plugins Backdoored in Supply Chain Attack

1

32

18

Wordfence

@wordfence

4 years

Our Threat Intelligence team discovered a vulnerability affecting over 2 million sites using the All in One SEO Pack plugin. We've included a proof of concept video explaining how this vulnerability could be exploited to take over a WordPress site.

2 Million Users Affected by Vulnerability in All in One SEO Pack

On July 10, 2020, our Threat Intelligence team discovered a vulnerability in All In One SEO Pack, a WordPress plugin installed on over 2 million sites. This flaw allowed authenticated users with...

www.wordfence.com

0

18

Wordfence

@wordfence

3 years

WordPress 5.7.2 is a security patch for a Critical Object Injection vulnerability in PHPMailer, the component that WordPress uses to send emails by default. Moments ago, we posted an analysis of the risk presented by this vulnerability.

WordPress 5.7.2 Security Release: What You Need to Know

The vulnerability in PHPMailer, while critical, is unlikely to be exploitable on most WordPress installations

www.wordfence.com

0

11

18

Wordfence

@wordfence

11 months

Wordfence announces a bug bounty program to fund WordPress security research targeting the most dangerous vulnerabilities, and to raise the profile of researchers.

Wordfence Launches Bug Bounty Program to Fund WordPress Security Research and Showcase Researchers

At Defiant Inc and Wordfence, our mission is to Secure the Web. A critical component of creating and maintaining a secure online community is the research that reveals vulnerabilities in software....

www.wordfence.com

1

8

19

Wordfence

@wordfence

6 years

Using PHP 5 Becomes Dangerous in 2 Months

1

9

17

Wordfence

@wordfence

2 years

Wordfence film crew headed out to Ironman World Championships in St George to support Wordfence sponsored Marco Stichini. #ironman

0

2

17

Wordfence

@wordfence

7 years

WordPress Supply Chain Attacks: An Emerging Threat

In the last few months, we have discovered a number of supply chain attacks targeting WordPress plugins. In this post, we explain what a supply chain attack is, why WordPress is an attractive target...

www.wordfence.com

0

14

18

Wordfence

@wordfence

4 years

PHP 8.0 is set to be released on November 26, 2020, and WordPress site owners and developers may be in for a rough ride. Today, we take a look at what this means for your WordPress site on the official Wordfence blog.

PHP 8: What WordPress Users Need to Know

PHP 8.0 is set to be released on November 26, 2020, and WordPress site owners and developers may be in for a rough ride

www.wordfence.com

0

13

18

Wordfence

@wordfence

5 years

Having a great time at WordCamp Orlando this weekend? We chatted with #WCORL 's amazing lead organizer Sandy Edwards a few weeks ago. Check out her interview!

Podcast Episode 41: KidsCamp and the Next Generation of WordPress Users with Sandy Edwards

As of WordCamp Boston 2019, Sandy Edwards has organized 26 KidsCamps across the US. We talk about what kids do at a WordPress KidsCamp, the success these kids have had publishing with WordPress,...

www.wordfence.com

0

4

18

Wordfence

@wordfence

3 years

Over 1 Million Sites Affected by Gutenberg Template Library & Redux Framework Vulnerabilities.

Over 1 Million Sites Affected by Gutenberg Template Library & Redux Framework Vulnerabilities

On August 3, 2021, the Wordfence Threat Intelligence team initiated the disclosure process for two vulnerabilities we discovered in the Gutenberg Template Library & Redux Framework plugin, which is...

www.wordfence.com

2

9

17

Wordfence

@wordfence

5 years

Kathy Zant will be bringing The Hacking Mindset to WordCamp Seattle this weekend. This is not your average #WordPress #security talk; Kathy will show you how being proactive about security helps you overcome obstacles & become successful in all areas of business and life. #WCSEA

2

6

18

Wordfence

@wordfence

6 years

Wordfence and GDPR: How The Defiant Team Are Preparing For GDPR

Update: Wordfence is now GDPR compliant. Click here to learn more. We want to send out an update on the new data protection law, the General Data Protection Regulation (GDPR), going into effect soon...

www.wordfence.com

0

10

15

Wordfence

@wordfence

5 years

Happening Now: Over 2 Percent of Sites Using a Let’s Encrypt TLS Certificate May Throw Security Warnings

Happening Now: Over 2 Percent of Sites Using a Let’s Encrypt TLS Certificate May Throw Security...

On Wednesday, March 4, 2020, 3 million Transport Layer Security (TLS) certificates issued by Let’s Encrypt will be revoked because of a Certificate Authority Authorization (CAA) bug. This is 2.6% of...

www.wordfence.com

0

9

17

Wordfence

@wordfence

3 years

XSS Vulnerability Patched in SEOPress Affects 100,000 sites. Flaw made it possible for an attacker to inject arbitrary web scripts on a vulnerable site which would execute anytime a user accessed the “All Posts” page. Details on the Wordfence blog:

XSS Vulnerability Patched in SEOPress Affects 100,000 sites

On July 29, 2021 the Wordfence Threat Intelligence team initiated the responsible disclosure process for a vulnerability that we discovered in SEOPress, a WordPress plugin installed on over 100,000...

www.wordfence.com

1

11

18

Wordfence

@wordfence

3 years

1.6 Million WordPress Sites Hit With 13.7 Million Attacks In 36 Hours From 16,000 IPs

Today, on December 9, 2021, our Threat Intelligence team noticed a drastic uptick in attacks targeting vulnerabilities that make it possible for attackers to update arbitrary options on vulnerable...

www.wordfence.com

0

13

17

Wordfence

@wordfence

4 years

Happening now on Wordfence Live: how does your website's speed & responsiveness affect your customer's experience? We're looking at the website speed measurement secrets you won't see anywhere else. Also, giving away swag you won't find anywhere else, too!

0

13

17

Wordfence

@wordfence

11 months

Wordfence launches Wordfence CLI 2.0.1 "Voodoo Child" -- Server vulnerability scanning at scale for free and commercial use, without limitations. Scan your entire fleet of WordPress servers in minutes for vulnerabilities and malware from the Linux command line.

0

4

18

Wordfence

@wordfence

4 years

The Wordfence Threat Intelligence team has requested further information to verify the allegedly critical severity vulnerability found in Contact Form 7. Read more about our tests & why detailed Proof of Concepts are important for security research.

2

8

18

Wordfence

@wordfence

4 years

Moments ago, our Threat Intelligence team published details about 2 vulnerabilities discovered in Facebook for WordPress, a plugin installed on over 500K sites. These are considered high & critical severity flaws that could lead to site takeover.

Two Vulnerabilities Patched in Facebook for WordPress Plugin

On December 22, 2020, our Threat Intelligence team responsibly disclosed a vulnerability in Facebook for WordPress, formerly known as Official Facebook Pixel, a WordPress plugin installed on over...

www.wordfence.com

0

11

17

Wordfence

@wordfence

6 years

Did a hack pollute your search engine results and damage your reputation? Not all is lost. Here's how to recover your search engine results after you've been hacked. #seo #wordpress #security

0

5

15