Hey fellow bloggers and WordPress lovers. I'm here with some bad news today, but hopefully we can get through it together. Over the past few weeks, but specifically over the last couple of days, I've noticed a ton of hits toward many of my clients' XMLRPC.php files. After looking it over and confirming my findings on the Sucuri blog, I realized there is an uptick in brute force attacks going on. This one is not good since they are using the ever vulnerable xmlrpc.php file to orchestrate …
news
Upgrade to WordPress 4.3.1 – Security Update
Hello everyone! I hope you're having a good and productive week. We are busy here at iMark Interactive making sure out clients' sites are updated to the latest version of WordPress (release notes). Yesterday, WordPress released a security update to version 4.3. Version 4.3.1 is a security update that handles two cross-scripting vulnerabilities and one user privilege escalation. This is a recommended update for everyone! According to the WordPress.org blog, here are the potential issues …
WordPress Security Update in 4.2.4
I hope everyone is enjoying their week. This is just a gentle reminder that WordPress has been updated to version 4.2.4. This is a security and maintenance release and it's strongly encouraged that you update all of your WordPress sites. This release covers three cross-scripting vulnerabilities and a potential SQL injection that could compromise your site. If you want to read more about the release and what they found, you can check it out here. Before you update your site, please make sure …
Make Sure to Upgrade to WordPress 4.2.3
Hello everyone! I hope you're having a wonderful blogging day. I just wanted to send out a note reminding everyone to upgrade to the new Wordpress version. This is only if you're on a self-hosted install of Wordpress (ie Wordpress.org). They just released 4.2.3, which fixes a security flaw. This is a recommended upgrade and you should do it quickly if you can. Along with the security fix, this update also fixes 20 bugs from Wordpress version 4.2. If you want to get adventurous, here is the …
Spoof Warning – Fake BlueHost Emails
I help a lot of customers with their websites. This is one service I love providing to any sized site. When I help customers, I tell them to contact me when they have questions. It's an easy way to ease their minds when something happens. While I provide a deep level of service for my blog management customers, I still provide assistance to anyone who has used any of my services in the past. Spoofed BlueHost Email I got a question the other day regarding a BlueHost email. My customer had two …
