WordPress Weekly News 44: More Than 5400 WordPress Websites Hacked, WordPress 4.9.1 and Much More
In this edition of WordPress Weekly News, we will cover how more than 5400 WordPress websites got hacked, WordPress 4.9.1, and an international study showing WordPress at the top of the CMS market.
Keylogger Infects More Than 5400 WordPress Websites
WordPress has been hit by a crypto mining malware that has infected more than 5400 WordPress website. The script has been loaded from “cloudflare.solutions” domain according to Sucuri.
The malicious script logs anything that WordPress users type on their websites. The script can extract all kinds of data including login credentials. The threat is even severe if the script is running on an online store as the data includes customers’ login credentials.
“We also mentioned a post written back in April that described the Cloudflare.solutions malware, which came along with the cryptominers. At this moment, PublcWWW reports there are 5,482 sites infected with this malware. It seems that this evolving campaign is now adding keyloggers to the mix.” – mentioned in the analysis by Sucuri.
WordPress 4.9.1 was released as a security fix to the WordPress 4.9 as it was affected by several vulnerabilities.
“WordPress versions 4.9 and earlier are affected by four security issues which could potentially be exploited as part of a multi-vector attack,” WordPress developer John Blackbourn
Apart from the security fixes, WordPress 4.9.1 includes the proper use of code escaping to the language attributes used on html elements. Also, WordPress 4.9.1 ensures RSS feed attribute disclosure are correctly escaped.
International Study Shows WordPress at The Top among Enterprise Organizations
An international study conducted by Vanson Bourne and commissioned by WP Engine and Manifesto researched on which CMS is most commonly used among enterprise organizations.
The study surveyed more than 300 IT and marketing managers in the US and UK. Most of them worked for organizations with more than 3000 employees and an average revenue of $3.2 billion.
The survey revealed that WordPress is joint top with Adobe Experience Manager as the most used CMS. In most companies, WordPress was used as a secondary CMS.
93% of organization believed that using a secondary CMS has multiple benefits like faster time to market, user-friendliness, agility and quick customization.
The Week’s Best Tutorial & Tips
That’s all from this week’s WordPress Weekly News. If you have some exciting WordPress news, do share it in the comments below.
Subscribe to Get a FREE WordPress Ebook Right in Your Inbox
WPblog provides the complete guide to launch your WordPress website completely FREE!
Moeez is ‘The’ blogger in charge of WPblog. He loves to interact and learn about WordPress with people in the WordPress community. Outside his work life, Moeez spends time hanging out with his friends, playing Xbox and watching football on the weekends. You can get in touch with him at moeez[at]wpblog.com.