Malware and WordPress insecurity on website...

polonus · 2015-10-27T16:37:29.000Z

g12
t='';}}x[l-a]=z;}document.write('<'+x[0]+' '+x[4]+'>.'+x[2]+'{'+x[1]+'}</'+x[0]+'>');}xViewState();

WordPress Plugins
The following plugins were detected by reading the HTML source of the WordPress sites front page.

Warning User Enumeration is possible
The first two user ID’s were tested to determine if user enumeration is possible.

-/wordpress/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.2.1 vulnerable severity is medium.
see: http://bugs.jquery.com/ticket/11290

polonus (volunteer website security analyst and website error-hunter)

jeffersonsant · 2015-10-29T20:21:13.000Z

Hello.

It was added 2 days
is now being blocked JS:HideLink -A [Trj].

Announcements