280,000+ Wordpress Sites Attacked By Hackers

September 15, 2022 By Monica Green

(Image Credit Google)

Today, the Wordfence Threat Intelligence team warned that WordPress sites are primarily targeted with exploits bugging a zero-day vulnerability in the WPGateway plugin. However, WPGateway is a WordPress plugin that enables admins to simplify several tasks, including backing up and setting up sites and managing themes and plugins from a central dashboard. Although, this crucial privilege escalation security flaw (CVE-2022-3180) enables fictitious attackers to add a con artist with admin privileges to take over sites running the vulnerable WordPress plugin entirely.

Also, Wordfence senior threat analyst Ram Gall said today, "On September 8, 2022, the Wordfence Threat Intelligence team became aware of an actively exploited zero-day vulnerability being used to add a malicious administrator user to sites running the WPGateway plugin." He added, "The Wordfence firewall has successfully blocked over 4.6 million attacks targeting this vulnerability against more than 280,000 sites in the past 30 days." Additionally, Wordfence revealed active exploitation of this security bug in the wild, and it didn't release additional information regarding these attacks or the vulnerability.

To avoid such attacks in the future, Wordfence claims that it wants to prevent other exploitation. Yet, to avoid any circumstances, it is recommended to WPGateway users patch their installations before other attackers develop their exploits and join the attacks.

By Monica Green

I am specialised in latest tech and tech discoveries.

280,000+ Wordpress Sites Attacked By Hackers

Walmart's GenAI Search Engine: Challenging Google's Dominance in Retail Search

Introducing the MSI Claw Handheld: Your Ultimate Gaming Companion

Uber Increases In-App Ads, Prompting Mixed Reactions from Customers

Apple's iOS 18: A Leap into the AI Era

Google's Regular Pixel 8 Won't Get Gemini Nano AI

MacBook Air M3 Makes Amends for M2's Storage Blunder

Samsung Unveils the Galaxy M15 5G

Elon Musk's xAI to Open-Source Chatbot Grok

Contra: Operation Galuga - A Modern Run-and-Gun Classic

Musk Confirms X's TV App Arrives This Week

Walmart's GenAI Search Engine: Challenging Google's Dominance in Retail Search

Uber Increases In-App Ads, Prompting Mixed Reactions from Customers

Apple's iOS 18: A Leap into the AI Era

Google's Regular Pixel 8 Won't Get Gemini Nano AI

Elon Musk's xAI to Open-Source Chatbot Grok

Instagram Surpasses TikTok in App Downloads