Company website security: WordPress, plugins and hosting
A hacked website damages reputation, search rankings and can infect visitors. Practical steps to keep a business website safe.
Read article
CySec blog
WordPress — articles and guides
All CySec articles about WordPress: current vulnerabilities, step-by-step guides and practical protection advice for businesses in Armenia.
Really Simple Security (CVE-2024-10924): a security plugin that let attackers log in as admin
An authentication bypass in a plugin installed on about 4 million WordPress sites. Ironically, it affected sites that had turned on two-factor authentication.
Read articleWordPress LiteSpeed Cache (CVE-2024-28000): any visitor could become an administrator
A weak security hash in a caching plugin used on millions of sites allowed unauthenticated privilege escalation. Update and check your admin users.
Read articleGiveWP donation plugin (CVE-2024-5932): remote code execution through a donation form
A PHP object injection in a popular donation plugin let unauthenticated attackers run code and delete files. What site owners should do.
Read articleWP File Manager (CVE-2020-25213): a zero-day that let anyone upload files to WordPress
A file manager plugin with about 700,000 installations allowed unauthenticated file upload and code execution. A classic lesson about risky plugins.
Read articleLet's make your IT secure and predictable
Tell us about your infrastructure and goals. We'll get back to you within one business day with next steps.