Cybersecurity researchers at GoDaddy-owned Sucuri have warned that an old plugin called Eval PHP, last updated a decade ago, is being used to hack WordPress websites. The plugin, which creates a backdoor and can mask its activities as cookies has been described as “dangerous.”
The advice is to:
– Keep your website patched and up to date with the latest security releases.
– Protect the admin panel behind 2FA or some another access restriction.
– Regularly backup the website.
– Use a web application firewall to block any bad bots and to virtually patch any known vulnerabilities.
As key project members in many of our IT projects whether, actively assisted or simply advised what they do not know about IT, in our opinion isn’t worth knowing!
- Nadia Mullins-Hills -