How to Protect WordPress Against Site Injection Attacks (3 Ways)
It’s common knowledge that WordPress themes and plugins can make your site more vulnerable to attack. However, third-party libraries can also leave your site susceptible to hackers. Fortunately, there are steps you can take to protect your WordPress installation – even when the security loophole originates from third-party code. This has never been more important, as a critical vulnerability was recently discovered in the library that WordPress uses to send emails. In this post, we’ll discuss what this new object injection vulnerability is, and why it could spell disaster for your website. We’ll then share three simple ways to protect your site against the PHPMailer vulnerability, plus other site injection attacks. Let’s get started! An Introduction to Site Injection Attacks The WordPress core team has a good reputation for addressing vulnerabilities on its platform. However, this popular Content Management System (CMS) doesn’t exist in a vacuum. It’s widely acknowledged that some WordPress themes and plugins can make your site more susceptible to attack. However, third-party libraries may also be putting your site at risk. Recently, an object injection vulnerability was discovered in WordPress versions 3.7 right through to 5.7.1, due to the PHPMailer library. This open source library is how…
…Full post on Torque Mag
Read Full
