21/03/2019
Got a WordPress website? Using the Easy WP SMTP plug-in to send out your emails? Make sure you update to version 1.3.9.1 as the previous version 1.3.9 contains a nasty zero-day exploit as described in this article.
If your site has been compromised, please:
1 Check your WordPress “Settings > General” page: Make sure nothing was tampered with (URL, Email Address, Membership and New User Default Role).
2 Check your WordPress “Users” page: Look for new users, weird admin accounts, check the admin email address etc.
3 Change all passwords.
4 Check your WordPress wp_options* table in the database”: Make sure wp_user_roles*, which contains user roles and capabilities, hasn’t been tampered with. You can also use our free NinjaScanner for WordPress.
5 Scan your files too, hackers may have uploaded backdoors.
6 Change your SMTP password, hackers may have stolen it.
Over the weekend, a vulnerability was disclosed and patched in the popular WordPress plugin Easy WP SMTP. The plugin allows users to configure SMTP connections for outgoing email, and has a userbase of over 300,000 active installs. The vulnerability is only present in version 1.3.9 of the plugin, an...
