Recently we’ve seen a few cases of a new WordPress hack which manages to display Google ads on every page of a website, but only for logged-out users. You may also experience other mysterious symptoms such as pages being moved to the trash. While it’s not particularly malicious, it’s still annoying and can undermine the credibility of your organization, in … Read More
I’m writing here because I can’t seem to find anyone else who is talking about it, but in the last week or so, I’ve noticed a massive increase in comment spam within WordPress, primarily from Russian sources. All week, clients have been reaching out to me thinking that their websites were hacked because, out of nowhere, they are seeing tons … Read More
Two of my client’s sites have recently been hit with the exact same website hack that I believe exploits a vulnerability found in versions 3.6.0 through 3.6.2. While the vulnerability has been fully described as a “remote code execution vulnerability,” I have not seen anyone describe any widespread attacks actually exploiting it. Until now! Well, friends, I am here to … Read More
