Weekly WordPress News and Updates: Mass attack on WordPress sites targets bug in WooCommerce plugin!

If you run an online store powered by WordPress and WooCommerce, you might want to check if your site is secure. A recent campaign by threat actors has exploited a critical vulnerability in the WooCommerce Payments plugin, which enables users to accept card payments on their sites. The vulnerability, patched in March, allows attackers to impersonate administrators and take over WordPress sites.

According to Wordfence, a WordPress security firm, the attacks began on July 14 and peaked at 1.3 million attacks against 157,000 sites on July 16. The attackers used a sophisticated technique of reconnaissance and persistence, installing malicious plugins and code on compromised sites.

Wordfence recommends updating the WooCommerce Payments plugin to the latest version (5.6.2 or higher) and scanning your site for any signs of compromise. You can also use Wordfence’s firewall to block any attempts to exploit the vulnerability.

// Team WPLift

WORDPRESS NEWS AND ARTICLES

• https://wptavern.com/wordcamp-us-2023-contributor-day-signup-is-open – WordCamp US 2023 Contributor Day Signup Is Open
• https://wptavern.com/gutenberg-16-2-brings-improvements-to-pattern-management-introduces-vertical-text-orientation – Gutenberg 16.2 Brings Improvements to Pattern Management, Introduces Vertical Text Orientation
• https://wordpress.org/news/2023/07/wordpress-6-3-release-candidate-1/ – WordPress 6.3 Release Candidate 1

TUTORIALS AND HOW-TOS

• https://www.elegantthemes.com/blog/wordpress/how-to-make-a-wordpress-website – How to Make a WordPress Website in 2023 (Beginners Guide)
• https://www.wpexplorer.com/sms-notifications-contact-form/ – How To Send SMS Notifications from Contact Forms
• https://www.wpbeginner.com/wp-tutorials/how-to-add-express-checkout-buttons-in-woocommerce/ – How to Add Express Checkout Buttons in WooCommerce
• https://www.wpbeginner.com/beginners-guide/how-to-take-a-screenshot-for-your-blog-posts/ – How to Take a Screenshot for Your Blog Posts (Beginner’s Guide)
• https://www.wpbeginner.com/wp-tutorials/how-to-setup-cloudflare-free-cdn-in-wordpress/ – How to Setup Cloudflare Free CDN in WordPress (Step by Step)

RESOURCES

• https://www.wpexplorer.com/wpbakery-vs-elementor/ – WPBakery vs Elementor: Which Builder is Better?
• https://www.wpexplorer.com/improve-google-pagespeed-score/ – How to Improve Your Google PageSpeed Score
• https://www.elegantthemes.com/blog/wordpress/wordpress-for-beginners – WordPress Tutorial for Beginners: Step by Step Guide (2023)
• https://www.elegantthemes.com/blog/wordpress/best-wordpress-theme-builders -11 Best WordPress Theme Builders in 2023 (Compared)
• https://www.elegantthemes.com/blog/wordpress/best-wordpress-podcast-themes – 10 Best WordPress Podcast Themes in 2023 (Compared)
• https://www.elegantthemes.com/blog/wordpress/best-minimalist-wordpress-themes – 10 Best Minimalist WordPress Themes in 2023 (Compared)