security issue
-
A few weeks ago we had stange files in the upload folder. They’re was unexpected php script files sending emails to whatever recipient received as a parameter. No need to go into details, we sanitized everything (well 2 years without an update, shame on us).
Clean install, periodic core and plugins update, unexpected php scripts come back here and there.
I noticed that this plugin didn’t have any update in the process (well that’s written as an alert on the plugin homepage).
So, I’m thinking maybe that’s the one used as a script injecting vector, without having a clear proof of that.
Though, It hink it might be good to warn someone in order to : do a security cheking, level up the alert level etc.
I’d be glad to provide more information in the limits of my skills.
Cheers.
- The topic ‘security issue’ is closed to new replies.
