WordPress Security Alerts – June 2016

Is the plugin or theme safe to use?

Click to open the "Plugin URL" or "Theme URL." If it opens the plugin or theme page at WordPress.org, then the security risk has been fixed and it's safe to use the latest version. Update it now.

If you see the "Whoops!" page (image below), then WordPress.org has removed it for security or it is no longer supported. You need to deactivate and remove it now.

Note: For plugins or themes you've downloaded from another website, you need to contact the developer directly and ask if a security update has been released. If it has, then you need to update to the latest version now. If not, then it is not safe to use. Deactivate and remove it now.

How do I scan my site for malware?"

Go to https://safewp.com/scanner/ and enter in your domain. If your site is infected, we can clean it for you. Visit your Dashboard for a special "Members Only" discount.

Exposure of sensitive information

Documents or credentials are leaked or revealed locally or from remotely.

Exposure of system information

System information is exposed and can be revealed, such as system version numbers, services running, installation paths, and similar (via remote and/or local).

Hijacking

Where a user session or communication channel can be taken over by other users or remote attackers.