WPScan - WordPress Security

With our very own WordPress vulnerability database, WPScan is the leading software for WordPress security scanning.

[WPScan - WordPress Security @_WPScan_]

WPScan 4.0.0: We're Back
https://t.co/8vPqUlYLee

[WPScan - WordPress Security @_WPScan_]

Our researchers found a Pre-Auth Object Injection vulnerability in the SEOPress plugin (300k+ active installs). It was fixed in the recent 7.9 update. Make sure to update now! #wordpress #security

https://t.co/Mor1Qwvc0V

[WPScan - WordPress Security @_WPScan_]

Thank you WPScan'ers for your trust! We're sending holiday cheer to you and your family. ☃️

[WPScan - WordPress Security @_WPScan_]

Our researchers found a Pre-Auth Stored XSS vulnerability in the WP Go Maps plugin (formerly known as WP Google Maps, 400k+ active installs). It was fixed in the recent 9.0.28 update. Make sure to update now!

#wordpress #security

https://t.co/m0IWVsc7vs

[WPScan - WordPress Security @_WPScan_]

Our researchers found a Pre-Auth Stored XSS vulnerability in the Popup Builder plugin (200k+ active installs). It was fixed in the recent 4.2.3 update. Make sure to update now!

#wordpress #security

https://t.co/h9O5MSOHXP

[WPScan - WordPress Security @_WPScan_]

Our researchers found a serious SQL Injection vulnerability in the WP Fastest Cache plugin. It was fixed in the recent 1.2.2 update. Make sure to update now!

https://t.co/Dk6m1ciEGd

#wordpress #security

[WPScan - WordPress Security @_WPScan_]

URGENT: Active Hacking Campaign Targeting WordPress Plugin 'Royal Elementor Addons' (200,000+ active installs).

Update to 1.3.79 ASAP!

For more info:

https://t.co/k5fpZrUHAb

#wordpress #security

[WPScan - WordPress Security @_WPScan_]

Our researchers found a RCE gadget chain in WordPress Core. Fortunately, it was fixed on the recent 6.3.2 update. Here's how it worked:

https://t.co/CSvE72xbzM

#wordpress #security

[WPScan - WordPress Security @_WPScan_]

Email Leak Oracle Vulnerability Addressed in WordPress 6.3.2

#wordpress #security

https://t.co/O0WPi4Y0aL

[WPScan - WordPress Security @_WPScan_]

URGENT: Active Hacking Campaign Targeting #WordPress Plugin 'Ultimate Member' (200,000+ active installs).

We strongly recommend disabling this plugin immediately until a patch is released that fixes the vulnerability.

For more info: https://t.co/XcDKsMk7tO

[WPScan - WordPress Security @_WPScan_]

Are you attending WordCamp Europe in Athens? We'd love to see you and talk security! Please come find the WPScan team at the Jetpack booth at WCEU.
#WCEU #WordPress #security

[WPScan - WordPress Security @_WPScan_]

WordPress VIP Integrates WPScan to Flag Potential Vulnerabilities with Major Sites Before They Go to Production
https://t.co/VRPNtZcUG9

[WPScan - WordPress Security @_WPScan_]

Uncovering a PHAR Deserialization Vulnerability in WP Meta SEO and Escalating to RCE
https://t.co/Rd7KBE9khf

[WPScan - WordPress Security @_WPScan_]

WP Engine’s Security Team Creates Custom Workflow with WPScan to Protect Clients https://t.co/pWtkTekNaJ

[WPScan - WordPress Security @_WPScan_]

What is a brute force attack?
https://t.co/yRufdPeBEY

[WPScan - WordPress Security @_WPScan_]

https://t.co/KeLOjqqHRN

[WPScan - WordPress Security @_WPScan_]

Thanks @HackingArticles for sharing the WPScan Cheat Sheet.

[Hacking Articles @hackinarticles]

Wpscan Cheat Sheet

@_WPScan_

https://t.co/iJOswFpbpK

#infosec #cybersecurity #cybersecuritytips #pentesting #redteam #informationsecurity #cissp #CyberSec #networking #networksecurity #CheatSheet #infosecurity #cyberattacks #security #linux #wordpress #bugbounty #bugbountytips

[WPScan - WordPress Security @_WPScan_]

WordPress Black Box Testing Basics
https://t.co/gL6WjMe0bm

[WPScan - WordPress Security @_WPScan_]

Fake plugin affecting WordPress sites
https://t.co/QOTmnCVBUp

[WPScan - WordPress Security @_WPScan_]

#CyberAttack

[WPScan - WordPress Security @_WPScan_]

Protecting your WordPress website against SQL injection attacks
https://t.co/p4Ium5kYxH