Wordpress News

Privilege escalation flaw discovered in the Jupiter and JupiterX Core Plugin affects more than 90,000 sites. A critical privilege escalation flaw found in two themes used by more than 90,000 WordPress sites can allow threat actors to take over the sites completely, researchers have found. WordFence Threat Intelligence Team researcher Ramuel Gall discovered the flaw, one of five vulnerabilities he found between early April and early May in the Jupiter and JupiterX Premium WordPress… More Info

Squarespace and WordPress are both evenly matched when it comes to ease of use, each earning a 7 out of 10, and are very close in other areas. Although a close match throughout, sometimes Squarespace edged ahead, and sometimes it was WordPress clinching the win in multiple categories. But which one is the winner for your own needs? Squarespace vs. WordPress CMS: An overview Let’s start with some good old-fashioned origin stories. WordPress, a common Squarespace alternative, was one of the first players in the game, having been built as an original open-source option for blogging, quickly… More Info

Beloved by first-time builders and experienced developers alike, you’ve undoubtedly heard WordPress mentioned as the go-to for building a website. But just because it’s so prevalent and so often suggested, does that make WordPress your best option? Often, the answer to that question depends on what you want to do, but to be fair, WordPress has a range of customizations, themes, and build options that make it a perfect fit for just about any business. The abundance of features and relative ease of use makes it one of the best content management systems (CMS) for just about anyone

Image source: Getty Images If you’re looking for something like WordPress, there are several CMS options for you that are similar. With different strengths, eight content management systems offer an alternative to WordPress. If WordPress CMS isn’t quite grabbing you, fear not. You can choose from many other options, including these eight, that specialize in different qualities. The top alternatives to WordPress as a content… More Info

On-page WordPress SEO affects the content you create for individual WordPress pages, including articles, blog posts and product pages, and how that page information is structured. Familiar with the terms “keywords” and “key phrases?” They play a critical role in SEO-friendly content creation on WordPress. In a nutshell, on-page SEO builds specific keywords or phrases into several elements of individual website pages. Called “keyword optimization,” this WordPress SEO strategy helps search engines understand the intent of a page and, in turn, rank it high in… More Info

Tens of thousands of WordPress websites are potentially at risk of compromise as part of an ongoing large-scale attack targeting a remote code execution vulnerability in the Tatsu Builder plugin. Tracked as CVE-2021-25094 (CVSS score of 8.1), the vulnerability exists because one of the supported actions does not require authentication when uploading a zip file that is extracted under the WordPress upload directory. While the plugin includes an extension control, this can be bypassed by adding a PHP shell with a filename that begins with a dot (“.”). Furthermore, a race condition in the… More Info

Hackers are massively exploiting a remote code execution vulnerability, CVE-2021-25094, in the Tatsu Builder plugin for WordPress, which is installed on about 100,000 websites. Up to 50,000 websites are estimated to still run a vulnerable version of the plugin, although a patch has been available since early April. Large attack waves started on May 10, 2022 and peaked four days later. Exploitation is currently ongoing. Tatsu Builder is a popular plugin that offers powerful template editing features integrated right into the web browser. The targeted vulnerability is CVE-2021-25094,… More Info

The Welch News Team – photo credit: The Welch News For 95 years, the people living in the McDowell County coalfields have depended on The Welch News for local coverage of important events. The county sits at the southernmost point of state, with a declining population of 18,363 and a median household income of $27,682. In the 1950’s, at the apex of the mining industry’s economic influence, McDowell County had close to 100,000 people living there. They mined the coal that built much of the infrastructure for American cities. After the industry became more mechanized and many… More Info

A years-long campaign by miscreants to insert malicious JavaScript into vulnerable WordPress sites, so that visitors are redirected to scam websites, has been documented by reverse-engineers. An investigation by analysts at Sucuri into malware found on WordPress installations revealed a much larger and ongoing campaign that last month, we’re told, hijacked more than 6,600 websites. The team has seen a spike in complaints this month related to the intrusions, according to analyst Krasimir Konov. “The websites all shared a common issue — malicious JavaScript had been injected within their… More Info

Cybersecurity researchers have disclosed a massive campaign that’s responsible for injecting malicious JavaScript code into compromised WordPress websites that redirects visitors to scam pages and other malicious websites to generate illegitimate traffic. “The websites all shared a common issue — malicious JavaScript had been injected within their website’s files and the database, including legitimate core WordPress files,” Krasimir Konov, a malware analyst at Sucuri, said in a report published Wednesday. This involved infecting files such as jquery.min.js and jquery-migrate.min.js… More Info