WordPress Security Plugin Wordfence Blocked Over 4.6 Million Attacks in a Month: Report

Wordfence, one of the most full-featured WordPress security plugins available now, announced earlier this week that it has blocked over 4.6 million cyberattacks, which were targeting a zero-day vulnerability, in the past 30 days. The attacks were being carried out against more than 2,80,000 sites running the WPGateway plugin, which allows its users to setup and manage WordPress sites from a single dashboard. The company is offering Incident Response services via Wordfence Care to those who believe they have been compromised.

Wordfence posted in a blog that on September 8, the Wordfence Threat Intelligence team became aware of an actively exploited zero-day vulnerability that was being used to attack sites running the WPGateway plugin. It released a firewall rule to Wordfence Premium, Wordfence Care, and Wordfence Response customers to block the exploit on the same day. It also said that the same protection for sites that are running the free version of Wordfence will be released on October 8.

“The Wordfence firewall has successfully blocked over 4.6 million attacks targeting this vulnerability against more than 280,000 sites in the past 30 days,” it added. The zero-day vulnerability found in a “part of the plugin functionality” was reportedly facilitating the addition of a malicious administrator user to sites running the WPGateway plugin, which is tied to the WPGateway cloud service, and offers its users a way to setup and manage WordPress sites from a single dashboard.

It is to be noted that the vulnerability identifier CVE-2022-3180 for this issue was reserved and the CVSS Score (yardstick to assign severity scores to vulnerabilities) was 9.8, suggesting a high vulnerability. Wordfence says that although they are releasing this public service announcement, there are some nitty-gritties that are being withheld in order to prevent further exploitation as “this is an actively exploited zero-day vulnerability, and attackers are already aware of the mechanism required to exploit it.”

How to know if you are compromised

Those who are using the Wordfence plugin can easily determine whether their site has been compromised using this vulnerability or not. If they find a malicious administrator with the username of rangex, and/ or find requests to //wp-content/plugins/wpgateway/wpgateway-webservice-new.php?wp_new_credentials=1 in site’s access logs, then it is a surety that they’ve been attacked. However, it does not mean that the site is fully compromised.

Buying an affordable 5G smartphone today usually means you will end up paying a “5G tax”. What does that mean for those looking to get access to 5G networks as soon as they launch? Find out on this week’s episode. Orbital is available on Spotify, Gaana, JioSaavn, Google Podcasts, Apple Podcasts, Amazon Music and wherever you get your podcasts.

Related Posts

3 Body Problem Netflix Release Set for 2023. Here’s a Behind-the-Scenes Peek From Tudum 2022

3 Body Problem is coming to Netflix in 2023. At its online-only event Tudum 2022, the world’s biggest subscription-based video streaming service revealed that its live-action adaptation…

The Witcher: Blood Origin Sets December 25 Release Date at Netflix Tudum 2022

The Witcher: Blood Origin just got a release date. At its online-only event Tudum 2022, Netflix revealed that the much-anticipated The Witcher prequel series will drop on…

The Witcher Season 3 Netflix Release Set for Summer 2023, Teaser Art Revealed — Tudum 2022

The Witcher season 3 is slated to release in the summer of 2023. At its online-only event Tudum 2022, Netflix dropped a teaser art for the Henry…

Enola Holmes 2 Trailer: Millie Bobby Brown Heads Her First Official Case at Tudum 2022

Enola Holmes 2 trailer is here. On Saturday, at its online-only event Tudum 2022, Netflix unveiled the first trailer for the Millie Bobby Brown-led mystery sequel, ahead of…

Heart of Stone Trailer: Alia Bhatt, Gal Gadot Tease Their Netflix Action Thriller at Tudum 2022

Heart of Stone first look is here. At its online-only event Tudum 2022, Netflix unveiled the first teaser trailer for the Gal Gadot-led action spy thriller movie,…

The Crown Season 5 Release Date Set for November 9 on Netflix — Tudum 2022

The Crown season 5 now has a release date: November 9. At its online-only event Tudum 2022, Netflix announced that the fifth season of its period drama…