
Episode 68
WordPress Under Attack Over 16,000 Ip Addresses Used To Target Over 1.6 Million Sites
Join our community!!
Subscribe to the Insecurity Brief podcast now on every platform we can find
Follow me on Twitter
Links
Our Website:
Youtube:
Rumble:
iTunes:
Spotify:
Trip’s books
https://www.tripelix.com/merch
Vulnerable Plugins
Activello (<=1.4.1)
Affluent (<1.1.0)
Allegiant (<=1.2.5)
Antreas (<=1.0.6)
Bonkers (<=1.0.5)
Brilliance (<=1.2.9)
Illdy (<=2.1.6)
MedZone Lite (<=1.2.5)
NatureMag Lite (no known patch available)
NewsMag (<=2.4.1)
Newspaper X (<=1.3.1)
Pixova Lite (<=2.0.6)
Regina Lite (<=2.0.5)
Shapely (<=1.2.8)
Transcend (<=1.1.9)
1.6 Million WordPress Sites Under Cyberattack From Over 16,000 IP Addresses
As many as 1.6 million WordPress sites have been targeted by an active large-scale attack campaign originating from 16,000 IP addresses by exploiting weaknesses in four plugins and 15 Epsilon Framework themes.
https://thehackernews.com/2021/12/16-million-wordpress-sites-under.html

1.6 Million WordPress Sites Hit With 13.7 Million Attacks In 36 Hours From 16,000 IPs
Today, on December 9, 2021, our Threat Intelligence team noticed a drastic uptick in attacks targeting vulnerabilities that make it possible for attackers to update arbitrary options on vulnerable sites. This led us into an investigation which uncovered an active attack targeting over a million WordPress sites. Over the past 36 hours, the Wordfence network has blocked over 13.7 million attacks targeting four different plugins and several Epsilon Framework themes across over 1.6 million sites and originating from over 16,000 different IP addresses.
https://www.wordfence.com/blog/2021/12/massive-wordpress-attack-campaign/
About The Host

Trip Elix
Trip Elix is an author, podcaster and video personality Over the last 30 years, he has worked as a security analyst and privately as a consultant, investigator, forensic technician, and skip tracer. He is the author of books and gives talks on security and privacy.