Security

Upgrade your caching plugins: Vulnerabilities in W3 Total Cache and WP Super Cache

Brian Krogsgard

April 23, 2013

Tony Perez, of Sucuri, has provided a summary, with explanation for the less security fluent of us, of a vulnerability in both W3 Total Cache and WP Super Cache. Definitely update right away.

Check your security settings: Brute force attacks against WordPress and Joomla sites have tripled

Brian Krogsgard

April 23, 2013

SecurityWordPress News

Hosting providers around the world are seeing a massive increase in brute force attacks against WordPress and Joomla sites. Attackers are looking to gain access to and compromise accounts, but failing that, they are slowing down their targets or even…

A summary of recent WordPress security attacks

Brian Krogsgard

April 16, 2013

SecurityWordPress News

Chris Jean, of iThemes, has done a nice job summarizing the recent flood of WordPress brute force login attacks, along with ways to prevent them. There is also a Codex page on handling brute force attacks that's getting a lot…

Review an intentionally vulnerable plugin

paul de wouters

April 10, 2013

DevelopmentSecurity

This is a really nice idea. It's a coding challenge where you have to audit a plugin for security flaws. A chance to learn more about best practices and getting your code reviewed by core developers.

Roll a New MAMP WordPress Install Quickly With This Shell Script

Brian Krogsgard

February 12, 2013

SecurityWordPress News

I wrote a shell script that creates a new WordPress install in MAMP (directory, database, and security keys) based on your input into the prompts and sends you to wp-admin/install.php upon completion. I use it for every project and put…

Dre Armeda and Brad Williams tease “DradCast”

Brian Krogsgard

February 1, 2013

SecurityWordPress News

It seems that Dre Armeda and Brad Williams are destined to return to the internet-airwaves soon, with what appears to be a podcast called, "DradCast." Drad is the nickname that Brad and Dre have given themselves as a tag team…

WordPress 3.5.1

Brian Krogsgard

January 24, 2013

Make WordPressSecurity

WordPress 3.5.1 is out. Some bug fixes, security fixes, and even a couple usability tweaks of the media manager. Go update. No reason not to do so immediately for minor updates.