One million WordPress sites at risk of attack

Asia's Tech News Daily

Cybersecurity researchers have helped patch several vulnerabilities in an extremely popular WordPress plugin, which could have been exploited by any visitor to undertake a number of actions against affected WordPress websites, such as exporting sensitive information.

The vulnerabilities, discovered by WordPress security experts Wordfence, existed in the OptinMonster plugin that boasts of a user base of over a million websites.

OptinMonster helps create sales campaigns on WordPress websites without much effort. through the use of dialogs. Wordfence explains that the vast majority of the plugin’s functionality as well as the OptinMonster app site rely on the use of API endpoints.

Open sesame

“Unfortunately, the majority of the REST-API endpoints were insecurely implemented, making it possible for unauthenticated attackers to access many of the various endpoints on sites running a vulnerable version of the plugin,” wrote Wordfence’s threat analyst Chloe Chamberland.

In her run down of the vulnerabilities, Chamberland notes that one of the vulnerable endpoints could have been exploited to leak sensitive data like the site’s full path on the server, along with the API key the website uses to make requests on the OptinMonster site.

“With access to the API key, an attacker could make changes to any campaign associated with a site’s connected OptinMonster account and add malicious JavaScript that would execute anytime a campaign was displayed on the exploited site,” says Chamberland.

She notes that rather worryingly the vulnerability could have been exploited by any visitor to the website.

Although there aren’t reports of the vulnerabilities being exploited in the wild, the plugin developer has invalidated all API keys, forcing users to generate new ones. They’ve also patched all vulnerabilities and made changes to how changes are made to the campaigns.

Want to build a website? Use one of these best WordPress website builders, and deck them up using one of these best WordPress themes.

Internet Explorer Channel Network
Asia's Tech News Daily
News Related

OTHER NEWS

Cambridge Quantum merges with Honeywell to form quantum computing supergiant

Two leading quantum computing companies, Honeywell Quantum Solutions and Cambridge Quantum, have combined to create Quantinuum, which is billed as the first full-stack quantum company. By leveraging the quantum expertise ... Read more »

Rihanna fans have questions about these new ‘open bum' Savage X Fenty pyjama pants

Rihanna has shared the latest set of Savage X Fenty pyjamas, and fans have a lot of questions. The singer and mogul modelled the new product, which feature a cut-out ... Read more »

Mythic white sperm whale captured on film near Jamaica

It is the most mythic animal in the ocean: a white sperm whale, filmed on Monday by Leo van Toly, watching from a Dutch merchant ship off Jamaica. Moving gracefully, ... Read more »

Twitter bans personal pics without consent

Twitter Inc says it will not allow sharing of personal media such as photos and videos on its platform without the consent of the person. The social media company's privacy ... Read more »

Every Eligible Adult To Be Offered Booster By End Of January - Boris Johnson

Britain’s Prime Minister Boris Johnson (Photo: PAUL GROVER via Getty Images) Boris Johnson has pledged that every eligible adult will be offered a booster by the end of the January. ... Read more »

Newcastle vs Norwich live stream: how to watch Premier League on Amazon Prime and abroad

Newcastle, still winless and pinned to the bottom of the table, host 19th-placed Norwich in a relegation six-pointer, and recent performances suggest this will be anything but dull. Read on ... Read more »

Canon EOS R7 tipped to arrive in 2022 to mark the end of EOS M cameras

So far, all of Canon’s RF-mount mirrorless cameras have been pricey, pro-focused models with slightly painful price tags. But the good news for amateur and hobbyist shooters is that this ... Read more »

Amazon takes on AMD, Intel with powerful Arm-based Graviton3 CPU

Amazon Web Services has announced, at its annual Re:Invent meeting in Las Vegas, new instances for EC2 in the shape of the C7g. These will be powered by its newest ... Read more »

The Different Ways Artificial Intelligence Solves Real-World Digital Identity Challenges

Javelin’s 2020 Identity Fraud Survey revealed the total cost of identity fraud in 2019 to be about $16.9 billion. This cost incorporates data breaches, fines from privacy regulations like CCPA ... Read more »

How effective are face coverings at reducing the spread of Covid-19?

Face coverings are compulsory again across a number of different settings in England, including shops and public transport. But how much is known about how effective they are at controlling ... Read more »

Johnson: All adults offered a booster jab by end of January

Prime Minister Boris Johnson announces that all eligible adults will be offered a booster jab by the end of January. Acting in response to the new Covid variant Omicron, Johnson ... Read more »

World airlines warn Omicron will hit travel again

The world’s airlines are bracing for a fresh impact from the Omicron variant. On Tuesday (November 30) the strongest warning came from mideast carrier Emirates. Company President Tim Clark warned ... Read more »

Extended Cyber Monday Sale: Get an Apple TV Remote That Actually Makes Sense

Apple has made innovation an event. Every year, Apple’s World Wide Developers Conference (WWDC) serves as a self-congratulatory festival in which Apple reveals new products and describes the new developments ... Read more »

Meta Forced To Sell Giphy After U.K. Regulator Pressure

Meta Platforms Inc (NASDAQ:FB) –formerly known as Facebook Inc– is facing a fresh setback in the U.K. as the country’s regulator decided to stop the company’s acquisition of Giphy, the ... Read more »

Moderna: Current Vaccines Not As Effective Against Omicron

Vaccines currently trying to fight COVID-19 may not be as effective against the omicron variant, warned the CEO of Moderna Inc (NASDAQ:MRNA) Stephane Bancel. He stated it is unlikely that ... Read more »

Extended Cyber Monday Discounts on 10 Apple Products

Apple has made a name for itself in small business. Offering powerful, flexible solutions for entrepreneurs and small businesses in all industries, Apple makes small business life easier. But Apple ... Read more »

New Twitter CEO Parag Agrawal steps from behind the scenes to high profile

Newly named Twitter CEO Parag Agrawal has emerged from behind the scenes to take over one of Silicon Valley’s highest-profile and politically volatile jobs. But his prior lack of name ... Read more »

This robot vacuum with more than 11,000 reviews is 30% off during Amazon's extended Cyber Week sales

Looking for more Cyber Week deals, gift guides and holiday tips? Sign up for Yahoo Lifestyle Canada’s newsletter! One of Amazon Canada‘s top-rated robot vacuums is on sale for 30 ... Read more »

Owlet baby socks discontinued after FDA warning. Parents argue device offers 'peace of mind.'

Owlet’s Smart Socks, baby monitoring socks programmed to track a baby’s sleep patterns, have halted sales after a warning letter from the U.S. Food and Drug Administration. The FDA stated ... Read more »

Star Wars: Ahsoka: everything you need to know about The Mandalorian spin-off

If you’re yet to watch the animated Star Wars TV shows, you may be asking why Ahsoka Tano warrants her own TV show. Everyone else, however, will simply be wondering ... Read more »

Once led by founders, Twitter set for fresh path

The passing of the baton could herald a new era of innovation for the company. Read more »

The Grand Tour's Carnage A Trois special has a release date on Amazon Prime Video

The latest episode in The Grand Tour’s fourth season has finally been given a release date – and a full-length trailer, too. The trusty trio of Jeremy Clarkson, James May ... Read more »

Cyber Monday gaming laptop deals 2021: the best offers still available

Many Cyber Monday gaming laptop deals are still available despite the day now being in our rearview mirror. Some of the best gaming laptops have had their prices slashed considerably ... Read more »

Sorry, AI isn't going to stop the spread of fake news

Disinformation has been used in . But it is undeniably being intensified by the use of smart technologies and social media. This is because these communication technologies provide a relatively ... Read more »

Windows 11 could finally solve one of the most common video call problems

Microsoft is looking to solve a major annoyance for video conferencing users with a new preview update for Windows 11. The Windows 11 Insider Preview Build 22494, which was released ... Read more »

Balance, Pokémon Unite: These were the best Android apps of 2021

The best app on the Android marketplace Google Play helps users create their own meditation plan. Balance was named the Best App of 2021 on Google Play, the company announced ... Read more »

WhatsApp rolls out first beta update for new Windows app

WhatsApp rolled out a new Windows app a few weeks ago. The app looks similar to the web version of the platform and it is available to download on the ... Read more »

Live now: the Cyber Monday TV deals still going

Refresh 2021-11-30T15:03:56.652Z (Image credit: TCL) The deals aren’t over yet folks! Just when I thought I was out, they pull me back in again. But that’s cool, because I love ... Read more »

MacBook Pro 16-inch reportedly has MagSafe charging issues for some owners

Apple’s MacBook Pro 16-inch reportedly suffers from a glitch that means some users are finding that the laptop isn’t charging up properly using the MagSafe connection in one particular scenario. ... Read more »

Lotfi Zadeh: Google doodle honors Azerbaijani-American computer scientist

Google is paying tribute Tuesday to the computer scientist who created the mathematical framework “fuzzy logic.” The search giant thonored Azerbaijani-American electrical engineer and professor Lotfi Zadeh. On this day ... Read more »

Watch: Is Honda reviving its self-balancing motorbike?

There’s an interesting video circulating on and , claiming that Honda unveiled a self-balancing motorcycle on November 29 in Japan. In fact, if you watch it above, you’ll see a ... Read more »

How to use two VPNs on one device

Installing your first VPN gets you all kinds of benefits. You’re more protected when you access public Wi-Fi, you can unblock Netflix and hundreds of other sites, and go torrenting ... Read more »

Rain to replace snow in the Arctic as climate heats, study finds

Photograph: Mario Tama/Getty Images Climate models show switch will happen decades faster than previously thought, with ‘profound’ implications Rain will replace snow as the Arctic’s most common precipitation as the ... Read more »

Parliamentary panel on Data Protection Bill to seek extension for report submission

Representative image The Joint Committee of Parliament (JCP) on the Personal Data Protection Bill will move a motion in Lok Sabha on December 1 seeking extension of time for presentation ... Read more »

Toyota: First UK Human Support Robot Home Trial at the Home of Anthony Walsh

© Getty Images Anthony Walsh Meets HSR Anthony Walsh lived in Southgate, North London, with his wife Siobhan and two young children.  He was diagnosed with MND in May 2021 ... Read more »

Live Cyber Monday deals still available

Read more »

COVID-19: Mild and moderate cases during pregnancy doesn't harm babies' brains, finds study

Parents should be reassured, there is "no evidence that a maternal SARS-CoV-2 infection has any effect on the brain development of the unborn child" say scientists. Read more »

OnePlus 8 series gets stable Android 12 update in the form of Paranoid Android Sapphire Alpha

Android 12 was finally released in its stable form on October 4 and the source code of the same was uploaded to AOSP on that particular day. The Paranoid Android ... Read more »

RNLI lifeboat 'blocked from going to rescue migrants by angry fishermen'

The RNLI Hastings lifeboat heads out to sea during a training exercise. (File photo: PA) A group of angry fishermen blocked a lifeboat from going to sea to rescue migrants ... Read more »

Johnson admits Moderna CEO 'probably right' about Omicron

Boris Johnson admits Moderna CEO Stephane Bancel is “probably right” about the possibility that current vaccines may struggle against the new Omicron Covid variant. He stresses though that Bancel was ... Read more »
On free-english-test.com you will find lots of free English exam practice materials to help you improve your English skills: grammar, listening, reading, writing, ielts, toeic