Delucks SEO plugin Vulnerability – JS injection Redirecting to other websites


Any versions below 2.1.7 is vulnerable to this security issue and websites using older versions are likely hacked.

Hackers are exploiting it and injecting their malicious javascripts into files and database mainly in the dpc_basic_metadata rows under the wp_options table.

The injected JavaScript code is loading the following remote JS files:


https://adsnet[.]work/scripts/place.js

https://media-sapiens[.]com/pu-placer.js

to cause redirects to other malicious websites such as:

double-clickd[.]com

belaterbewasthere[.]com

redrelaxfollow[.]com

greenrelaxfollow[.]com

And many others.

Signup and Try our malware removal service and let’s clean & protect your websites! Protect your website using our Website Firewall NOW!

You can check your website securityby using this website malware scanner

https://scan.attacker.net

 

 

 



Do you value your Business at ZERO?

Your business value is linked to your security strategy. If you don’t have your own plans then YOU value your data at ZERO.

DO NOT Risk losing it!


Start now, Website Security & Hack Cleaning service + FREE Website Firewall + FREE SSL + 50% OFF


https://attacker.net/website-security
https://attacker.net/website-security-plans-pricing

You can check your website security by using this free website malware scanner https://scan.attacker.net

Attacker.NET offers Free website security Plan & Malware Removal services for Charities

We are proud to announce that we provide free website security Plan for charities. We offer our Silver plan for FREE for approved charities. Please contact [email protected] for more details.

Plans & Pricing | Free Malware Scan

WordPress WP Live Chat Plugin is massively exploited in the wild and redirects to other spam websites

Any versions below 8.0.27 is vulnerable to this security issue and websites using older versions are likely hacked.

Hackers are exploiting it and injecting their malicious javascripts into files and database mainly in the “siteurl” and “home” rows in your wp_options table to cause redirects to other malicious websites such as:

letsmakesomechoice[.]com
garrygudini[.]com
blackawardago[.]com
detectnewfavorite[.]com
traveltogandi[.]com
funnwebs[.]com
destinylocation[.]info
leftoutsidemyprofile[.]info
yourservice[.]live
letstakemetoad[.]com

And many others.

Signup and Try our malware removal service and let’s clean & protect your websites!

You can check your website securityby using this website malware scanner

https://scan.attacker.net

WordPress Blog Designer plugin vulnerability Redirecting to Malicious websites


Any versions below 1.8.10 is vulnerable to this security issue and websites using older versions are likely hacked.

Hackers are exploiting it and injecting their malicious javascripts into files and database mainly in the “siteurl” and “home” rows in your wp_options table to cause redirects to other malicious websites such as:

letsmakesomechoice[.]com
garrygudini[.]com
blackawardago[.]com
detectnewfavorite[.]com
funnwebs[.]com
destinylocation[.]info
leftoutsidemyprofile[.]info
yourservice[.]live
letstakemetoad[.]com

And many others.

Signup and Try our malware removal service and let’s clean & protect your websites!

You can check your website securityby using this website malware scanner

https://scan.attacker.net



WordPress Yuzo Related Posts plugin vulnerability – Thousands of WordPress websites have been Hacked

Hackers are exploiting it and injecting their malicious javascripts into files and database mainly in the “siteurl” and “home” rows in your wp_options table to cause redirects to other malicious websites such as:

hellofromhony[.]com
hellofromhony[.]org
destinywall[.]org
clevertrafficincome[.]com
notifymepush[.]info
pushmeandtouchme[.]info
click.newsfeed[.]support
visnu[.]icu
premium-mobile[.]info
plutonium[.]icu
monitornotifyfriends[.]info
notifymepush[.]info

And many others.

Signup and Try our malware removal service and let’s clean & protect your websites!

You can check your website securityby using this website malware scanner

https://scan.attacker.net



Stored XSS vulnerability found in Social Warfare plugin causing Redirects to Malicious websites

If you use the Social Warfare plugin for WordPress then you are likely vulnerable to this security issue or already hacked.

You can check your website security by using this free website malware scanner https://scan.attacker.net

The vulnerability was mainly found in version v 3.5.2 and it’s being exploited for some time.

Hackers are exploiting it and injecting javascripts into files and database mainly in the social_warfare_settings in your wp_options table to cause redirects to other malicious websites such as:

setforspecialdomain[.]com

setforconfigplease[.]com

getmyfreetraffic[.]com

redrentalservice[.]com

strangefullthiggngs[.]com

and many others.

Signup and Try our malware removal service and let’s clean & protect your websites!

You can check your website securityby using this website malware scanner

https://scan.attacker.net

Vulnerability found in WordPress Easy WP SMTP plugin causing Malicious Redirects to other sites

If you use Easy WP SMTP plugin for wordpress then you are likely vulnerable to this security issue or already hacked.

You can check your website security by using this free website malware scanner https://scan.attacker.net

The vulnerability was mainly found in version v 1.3.9 and it’s being exploited for some time.

Hackers are exploiting it and injecting javascripts into files and database to cause redirects to other malicious websites such as:

setforspecialdomain[.]com

setforconfigplease[.]com

getmyfreetraffic[.]com

redrentalservice[.]com

strangefullthiggngs[.]com

and many others.

Signup and Try our malware removal service and let’s clean & protect your websites!

You can check your website securityby using this website malware scanner

https://scan.attacker.net

Rsync remote attack-CVE-2014-9512

rsync 3.1.1 allows remote attackers to write to arbitrary files via a symlink attack on a file in the synchronization path.

 

Timeline

January 5, 2015 MITRE reserved CVE
February 12, 2015 NVD published advisory

Authority references

Vendor & other references

WordPress theme directory traversal

Directory traversal vulnerability in the Elegant Themes Divi theme for WordPress allows remote attackers to read arbitrary files via a .. (dot dot) in the img parameter in a revslider_show_image action to wp-admin/admin-ajax.php.

 

 

Timeline

February 11, 2015 NVD published advisory

Authority references

Exploits