Future Hosting, a VPS hosting and dedicated server hosting provider, has warned WordPress hosting users of a new wave of attacks targeting fresh WordPress installations.
Fresh WordPress installations display an interface that is used to submit essential configuration data, including login and database credentials. This interface is not protected in any way, warns Future Hosting, and can be used by attackers to compromise the WordPress installation and potentially the server on which the WordPress site is hosted.
“We host thousands of WordPress sites on our VPS and dedicated server hosting platform,” said Maulesh Patel, VP of Operations of Future Hosting, “We hope to raise awareness of the risk inherent in leaving a fresh WordPress install in its default state. WordPress installations uploaded manually or via a script should be completed immediately.”
Once the attacker has control of the site, they can install custom plugins and execute arbitrary PHP code. WordFence reports that attackers are actively scanning the web for incomplete WordPress installations and using them to compromise hosting accounts.
There is no safe period during which an incomplete configuration can be exposed to the web. With a combination of automated scanning and scripts, bad actors could compromise an unconfigured WordPress site within seconds of it being uploaded to a server.
When installing WordPress on a hosting account or server, the configuration process should be completed immediately. Once the configuration and installation is complete, the site would no longer be vulnerable to these hacks.
Read more at VPS Hosting Company, Future Hosting, Warns of Hack Risk Inherent in Leaving Fresh WordPress Install in Its Default State on Website Hosting Review.
The post VPS Hosting Company, Future Hosting, Warns of Hack Risk Inherent in Leaving Fresh WordPress Install in Its Default State appeared first on Website Hosting Review.
TL;DR Leadership appointment: Dipan Patel joins Duos as Chief Operating Officer, reporting to CEO Doug…
A maximum-severity vulnerability in Microsoft Entra ID allowed unauthenticated attackers to remotely execute code and…
Opposition to data center developments has been spreading due to local issues such as rising…
TL;DR While cloud computing has traditionally been defined by speed, scale, and flexibility, mature environments…
TL;DR AI and cloud demand are expanding Latin America’s digital infrastructure opportunity while increasing requirements…
TL;DR Lightpath has entered the Greater Atlanta market with high-capacity Managed Bandwidth services. Wavelength and…