-
WordPress 5.5.1, WooCommerce 4.4 Released. Critical Security Updates Deployed
-Another busy month with a major WordPress core release, WooCommerce 4.4 and a number of high profile security updates. … continues
-
Website Refresh, new Managed Servers and Updates!
-I hope this finds everyone safe and well – here we are with a May 2020 update.
We have been trying to make the most of these unusual times, trying to remain productive and fast-track some projects. … continues
-
PHP 5 and 7.0 Reach End-of-Life
-PHP 5 and 7.0 will soon reach end-of-life. This means that these versions will no longer receive updates of any kind, including fixes for security issues. To ensure the on-going compatibility and security of your WordPress sites, you will need to upgrade to PHP 7.2. … continues
-
Price Drop on AutoSSL plans!
-Starting today, all WP NET Managed WordPress hosting plans include support for
FreeSSLAutoSSL. -
Introducing Google Safe Browsing Scans
-At WP NET, our customers website security is of the utmost importance to us. We employ various, overlapping malware and virus detection systems to provide the most robust protection to our customers. … continues
-
FreeSSL now available in Managed Server Control Panel
-We’ve recently deployed an update to our Managed Cloud Server Control Panel that adds support for managing FreeSSL (Let’s Encrypt) Certificates from directly within the Control Panel.
This means that all our Managed Cloud Server customers can now instantly apply SSL Certificates to their sites with the click of button. With this new addition — and considering the performance and SEO benefits of running sites with SSL — we recommend that all Cloud Server sites run under SSL.
More information, and complete instructions for using the Cloud Server Control Panel are available in our WP NET KnowledgeBase.
-
PayPal Security Updates and WooCommerce
-If you use WooCommerce, chances are you also use PayPal. Many PayPal users have begun receiving notification from PayPal regarding various security updates to their systems. Included in these updates are changes to the IPN (Instant Payment Notification) URLs. Many users are concerned about the impact this may have on their PayPal payments processing with WooCommerce.
If you’re interested in the technical details, you can read about it on the PayPal Knowledge site.
-
Custom Content Type Manager Backdoor Exploit
-Sucuri Security recently published a detailed post about a serious backdoor exploit that was discovered in the Custom Content Type Manager plugin.
This is a concerning development, as a malicious user somehow gained access to the plugin’s source code on the WordPress plugin repository and added the malware. They then bumped the plugin’s version number and anyone who installed the update was unwittingly infected by the backdoor exploit. Ouch. … continues
-
Security Update – glibc
-There have been two critical security issues in recent days, which we wanted to bring to your attention.
Firstly, a serious vulnerability was discovered in the glibc library which is included in just about every Linux OS distribution. This was particularly concerning as 1) the vulnerability has existed since 2008(!) and 2) because the glibc library is so widespread, being used in Linux, smartphones, routers and all sorts of other devices. It could be sometime before some of these vulnerable devices are identified and patched. The bug is listed as CVE-2015-7547.
If you host with WP NET you can relax — we’ve already patched all our shared servers and Cloud Servers. … continues
-
Security Update: now blocking XML-RPC
-Due to recent developments in brute-force hacking attempts using WordPress XML-RPC, we have implemented a new security measure to protect our customers.
The Sucuri Security blog post, Brute Force Amplification Attacks Against WordPress XMLRPC explains this issue very well, so we urge you to have a read if you would like to know more about this. … continues
Security
Security