Executable File Upload Attack

by 3 replies
4
For the fourth morning in a row, when I've checked my emails, I've received a notification from one of my main WP blogs that WordPress Firewall has detected and blocked a potential attack.

Specifically, this was an Executable File Upload Attack. Each time the hacker attempted to upload xxxxxxxx.com//wp-content/plugins/spotlightyour/monetize/upload/upload.php?img=&nonce=

The offending IP was 78.85.253.46 (Russian).

Although WordPress firewall is successfully blocking these attacks, is there anything else I can do to protect this blog?

Thanks - Anne
#website design #attack #executable #file #upload
  • Wow! That's exactly what happened to my website! I lost everything because of those hackers from Russia.

    Here's where I went wrong, I placed a box where users can upload their jpg's to the website. However because of the way it was programmed it would accept other file extensions. In my case the hacker uploaded a .php file.

    Likely what happened is that he uploaded that file and because of it he was able to write an executable command through the browser and that let him get access to my entire network and database.

    So my advise to you is remove anything that has to do with a user allowing to upload. I'm still finding a solution but just remove that upload thing. It's not a well protected script and I even begin to doubt Wordpress's security to allow these plugins and files to be executed through the FTP after they've uploaded the file.
    • [1] reply
    • No, I don't have anything like an upload box for other people on the blog.

      Thankfully, WordPress Firewall has done a great job of repelling these hacks, and in all probability will be sufficient. I was just thinking I could employ a "belt and braces" technique if someone could recommend something else.
  • Can you show me which page on your website your talking about?
Join the discussion

Next Topics on Trending Feed

  • 4

    Executable File Upload Attack

    For the fourth morning in a row, when I've checked my emails, I've received a notification from one of my main WP blogs that WordPress Firewall has detected and blocked a potential attack. Specifically, this was an Executable File Upload Attack. Each time the hacker attempted to upload xxxxxxxx.com//wp-content/plugins/spotlightyour/monetize/upload/upload.php?img=&nonce=