WordPress<\/a> installations have been adjusted by hackers exploiting a security flaw in a largely used plugin named WP Mobile Detector, warned security experts at Sucuri.<\/p>\nThe Plugin Vulnerabilities team first unveiled the worrisome news that the WP Mobile Detector plugin contains thezero-day vulnerability. However, the hackers basically exploited the issue in the plugin for the installation of porn-related spamming scripts, reported by the researchers at Sucuri.<\/p>\n
After unveiling the vulnerability, the plugin has been removed from the official WP plugin directory.<\/p>\n
This WordPress vulnerability<\/strong> was first publicly unveiled on 31st<\/sup> May although it was first seen on 27th<\/sup> May and after the removal of the plugin from the WordPress repository, it became unpatched, reported a blog post at Sucuri.<\/p>\nEstimation says that the plugin had more than 10,000 active installations and some of them are still vulnerable to cyber-attacks.<\/p>\n
By this flaw, the plugin fails to input validation which enables hackers for submitting malicious PHP code in input.<\/p>\n
According to Sucuri, the vulnerability can be easily exploited. In fact, the security experts became cautious of a possible issue after getting a request for a WP Mobile Detector file, to timthumb.php or resize.php inside the plugin directory with the backdoor URL. One of its examples is: blog\/wp-content\/plugins\/wp-mobile-detector\/resize.php<\/p>\n
The researchers also highlight that no fix is available now and so it is better to uninstall the malicious plugin.<\/p>\n
Users now update to the versions of 3.6 or 3.7, both of which are free from WordPress<\/a> vulnerabilities<\/strong>.<\/p>\n","protected":false},"excerpt":{"rendered":"An increasing number of WordPress installations have been adjusted by hackers exploiting a security flaw in a largely used plugin named WP<\/p>\n","protected":false},"author":7,"featured_media":432,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[55],"tags":[100,96,99,98,97],"class_list":["post-587","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-wordpress","tag-mobile-detector","tag-vulnerabilities","tag-website-security","tag-wordpress-version-upgrade","tag-wordpress-vulnerability","entry"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t
![](\"http:\/\/www.raghwendra.com\/blog\/wp-content\/uploads\/2015\/11\/dWordpress.png\")
<\/p>\n