Popular WordPress plugin hacked by angry former employee

guest · Jan 20, 2019

Popular WordPress plugin hacked by angry former employee
Hacker defaced the company's website and sent a mass email to all its customers, alleging unpatched security holes
January 20, 2019
https://www.zdnet.com/article/popular-wordpress-plugin-hacked-by-angry-former-employee/

According to its website, WPML has over 600,000 paying customers and is one of the very few WordPress plugins that is so reputable that it doesn't need to advertise itself with a free version on the official WordPress.org plugins repository.

[...] the attacker claimed he was a security researcher who reported several vulnerabilities to the WPML team, which were ignored.
WPML claims the hacker used the email addresses and customer names he took from the website's database to send the mass email, but he also used the backdoor to deface its website, leaving the email's text as a blog post on its site [archived version here].

Developers said the former employee didn't get access to financial information, as they don't store this kind of details, but they didn't rule that he could now log into customers' WPML.org accounts as a result of compromising the site's database.
Click to expand...

Log in or Sign up

Popular WordPress plugin hacked by angry former employee

guest Guest

Log in or Sign up

Popular WordPress plugin hacked by angry former employee

guest Guest

Useful Searches