Urgent Warning

[CHUMPS FROM OXFORD]

If you are using the Social Media Widget plugin (social-media-widget), make sure to remove it immediately from your website.

 

[Ladeemelie]

I'd like to just ask why but the word limit and all

 

[CHUMPS FROM OXFORD]

Malicious code was added 12 days ago.

Heck, I need to find out if I have it.

 

[AgentProvocateur]

Thanks for the heads-up, Chumps. It looks like it is fixed?

WordPress Plugin Social Media Widget Hiding Spam – Remove it now | Sucuri Blog

 

[ksigmtsu]

That's one of the things I'm always afraid of with the wordpress repository. There isn't much review of the code for malicious or backdoor code being added, and people just press update all the time assuming the code doesn't have some sort of nastyness in it.

 

[Crabcake Johnny]

That's one of the things I'm always afraid of with the wordpress repository. There isn't much review of the code for malicious or backdoor code being added, and people just press update all the time assuming the code doesn't have some sort of nastyness in it.

The less plugins you have the better. That doesn't mean it's fool proof but limits your exposure. And as always, make sure your entire site is backed up.

 

[AgentProvocateur]

This week, there has been a 'brute force' attack on wordpress websites by a bot, trying to target & crack wordpress sites with weak passwords. I heard about it through my host, and it's been causing problems with their servers.

So, if you have a weak password and a wordpress blog or site, you might want to look into it.

 

[Crabcake Johnny]

Here's a "must read" if you have a WP site regarding security:

https://www.box.com/s/vre2fakxe5c8cu0qz35i

And Matt Mullenweg has a short blog post about it today:

http://ma.tt/2013/04/passwords-and-brute-force/

 

[CHUMPS FROM OXFORD]

Thanks for the heads-up, Chumps. It looks like it is fixed?

WordPress Plugin Social Media Widget Hiding Spam – Remove it now | Sucuri Blog

Found it by accident on Google +. Always expert WP advice there.