Slashdot Mirror


Popular WordPress Plugin WPML Hacked By Angry Former Employee (zdnet.com)

A very popular WordPress plugin was hacked over the weekend after a hacker defaced its website and sent a mass message to all its customers revealing the existence of supposed unpatched security holes. From a report: In a follow-up mass email, the plugin's developers blamed the hack on a former employee, who also defaced their website. The plugin in question is WPML (or WP MultiLingual), the most popular WordPress plugin for translating and serving WordPress sites in multiple languages. According to its website, WPML has over 600,000 paying customers and is one of the very few WordPress plugins that is so reputable that it doesn't need to advertise itself with a free version on the official WordPress.org plugins repository. But on Saturday, ET timezone, the plugin faced its first major security incident since its launch in 2007. The attacker, which the WPML team claims is a former employee, sent out a mass email to all the plugin's customers.

2 of 37 comments (clear)

  1. Re:Security by Desler · · Score: 4, Informative

    It's also a joke that in 2019 that WordPress has no notion of sandboxing plugins so that any security holes they do have could be reasonably contained. Why do they still allow plugins to be huge gaping security holes?

  2. Re: The daily show is your news source? Oh my god by Anonymous Coward · · Score: 0, Informative

    If you hate being factually challenged and proven a liar constantly, one easy solution is to stop lying faggot Republicans. It's so simple even a GOP caveman can do it - or can you? I thought you could... maybe?

    Let's see if you can go 3 minutes without lying, then we'll double it. If you Trumptards make it one full day without a single lie, you may even graduate back to society. But let's not get ahead of ourselves.

    You are backing a traitor right now, that can't be easily repaired. He's literally Putin's dick cozy. Literally, Trump keeps Putin's cock warm for his livelihood and well-being ongoing. Mueller brings the thick rope soon though.

    Rope doesn't lie, Republican traitors. Memba dat.