WordPress: Hack Attack – 4 Plugins: Epsilon Framework Theme
Hack Attack – 4 Plugins: Epsilon Framework Theme
1.6 Million WordPress Sites Hit With 13.7 Million Attacked
By: Maryam the WebDesign Diva
T’is the season. I say it every year all the time but I don’t mean it in a “Santa Clause” kind of way. My reference connects to “hacker season.” Each winter holiday season more individuals and businesses become victims, one way or another. This year isn’t any different. Reading WordFence, the data attack list which has been happening this week focused on four plugins. WordFence explained “Today, on December 9, 2021, our Threat Intelligence team noticed a drastic uptick in attacks targeting vulnerabilities that make it possible for attackers to update arbitrary options on vulnerable sites. This led us into an investigation that uncovered an active attack targeting over a million WordPress sites. Over the past 36 hours, the Wordfence network has blocked over 13.7 million attacks targeting four different plugins and several Epsilon Framework themes across over 1.6 million sites and originating from over 16,000 different IP addresses.”
“A survey of the hackers attending this month’s Defcon 17 conference turned up these rather interesting results: About 81% of the hackers say they’re more active during the winter holidays.”
The following are the affected plugins and their versions:
- PublishPress Capabilities <= 2.3
- Kiwi Social Plugin <= 2.0.10
- Pinterest Automatic <= 4.14.3
- WordPress Automatic <= 3.53.2
The following are the affected Epsilon Framework theme versions:
Shapely <=1.2.8- NewsMag <=2.4.1
- Activello <=1.4.1
- Illdy <=2.1.6
- Allegiant <=1.2.5
- Newspaper X <=1.3.1
- Pixova Lite <=2.0.6
- Brilliance <=1.2.9
- MedZone Lite <=1.2.5
- Regina Lite <=2.0.5
- Transcend <=1.1.9
- Affluent <1.1.0
- Bonkers <=1.0.5
- Antreas <=1.0.6
- NatureMag Lite – No patch known. Recommended to uninstall from site.
How Do I Know If My Site Has Been Infected and What Should I do?
Contact Maryam’s Mark & Co, LLC Website Design Professional for Maintenance assistance.
Call 267-474-6713
There is a hacker attack every 39 seconds. Russian hackers are the fastest. 300,000 new malware is created every day. – Source: Forbes
This entry was posted in Research, Vulnerabilities, WordPress Security on December 9, 2021
