-
Recent Posts
- Could AI Make Humans Extinct Within the Next Decade?
- Is Weebly Getting Out of the Website-Builder Business?
- Are You “Leaking SEO” by Linking to Other Websites?
- Wix Harmony Is Now in Google Gemini. So Why Are Users Still Complaining?
- When AI Sounds Confident but Gets It Wrong: The Mount Shasta Rescue
- When AI Agents Start Working Together, Who Is Really in Control?
- WPForms and Rank Math: Did These WordPress Plugins Create a Backdoor With Admin Access?
- AI Can Text Your Friends for You. Wait, Who Am I Talking To?
- Bill Gates Is Betting on AI to Help Healthcare – While Warning About What AI Could Do to Jobs
- Wix Says AI Website Owners Should Care About Portability. There’s Just One Problem.
- WordPress 7.1 Broke WP Rocket: The Fatal Error and the Plugin Problem
- WordPress vs. UltimateWB for an Artist Website: Which Should You Choose?
- Thinking About Switching From WordPress? What Should You Consider Before You Move?
- The Airtable Acquisition Raises a Bigger Question: Do You Really Own the Software Your Business Runs On?
- How to Use Google Search Console’s New Generative AI Data to Improve Your SEO
- How to Update the Same Website Content on Multiple Pages at Once
- Discovered vs. Crawled Not Indexed in Google Search Console: What’s the Difference and How to Fix Each
- The Small Business Guide to Auditing Google Ads and Website Costs
Categories
Tag Archives: backdoor
WPForms and Rank Math: Did These WordPress Plugins Create a Backdoor With Admin Access?
There is a new kind of WordPress security issue that deserves a lot more attention.
It isn’t simply a case of a hacker discovering a vulnerability in a plugin.
It is a plugin itself introducing a mechanism that can give an outside service or AI system the ability to act on your WordPress site.
And two major WordPress plugins have recently put this issue in the spotlight: Rank Math and WPForms.
The situations are not identical, and it would
... Continue reading
Posted in AI, Compare Website Builders, Technology in the News, Website Security
Tagged administrative token, ai, ai agent, ai assistant, ai chat assistant, ai features, Awesome Motive, backdoor, claude, cursor, forum analytics, MCP, metadata, onboarding wizard, php, plugins, rank math, rank math support agent, schema, Search Engine Journal, security vulnerabilities, seo, seo plugin, setup checklist, Sybre Waaijer, third-party plugins, vulnerabilities, WAP, website security, WordPress, wordpress alternative, wordpress plugins, wordpress security, wp forms, wp forms lite
Leave a comment
The Hidden Cost of WordPress Security: Why Security Plugins Aren’t the Whole Answer
If you run a website, you know that security isn’t optional. For millions of WordPress users, the immediate reaction to securing a site is to install a security plugin. It’s practically a rite of passage.
But there is a conversation that many developers and web hosts avoid having until it's too late: the real cost of application-level security.
We aren't just talking about subscription fees. We're talking about the hidden performance tax, the administrative burden of constant updates, and the
... Continue reading
Posted in Compare Website Builders, Website Security
Tagged abandoned plugins, backdoor, backups, compatibility issues, cpu, CPU spikes, database, firewall, firewall rules, javascript, maintenance, malcar, malicious code, malware, performance tax, plugin, plugin compatibility issues, plugin vulnerabilities, RAM, security plugin, security stack, solid security, subscription fees, waf, web application firewall, website security, wordfence, WordPress, WordPress plugin vulnerabilities, wordpress security
Leave a comment
Over 1.6 Million WordPress Sites Hit: The OptinMonster and ShapedPlugin Supply Chain Attacks
For years, the gold-standard advice for WordPress website security has been simple: If you want to keep your site safe, stick to major, highly reputable brand names. A massive company has the infrastructure, team, and budget to audit their code and protect your perimeter.
But recent events have exposed a massive flaw in that logic.
When hackers shift from attacking individual sites to targeting the software creators themselves, relying on a big brand's reputation no longer guarantees safety. In fact,
... Continue reading
Posted in Compare Website Builders, Technology in the News, Website Security
Tagged 2FA, Awesome Motive, backdoor, cdn, database, Easy Digital Downloads, javascript, MalCare, malware, optinmonster, php, Product Slider, PushEngage, Real Testimonials Pro, shapedplugin, Smart Post Show Pro, supply chain attacks, TOTP, updraftplus, vulnerability, woocommerce, wordfence, Wordfence Login Security, WordPress, WP 2FA
Leave a comment
How to Fix: WordPress Error Class ‘C_NextGen_Settings’ Not Found
If your WordPress site is currently down with the fatal error: Class 'C_NextGen_Settings' not found, as the saying goes, you are not alone.
Just a white screen, staring at you - not so much the "White Screen of Death" (WSoD) - you get a clue on what is causing it by the error message displayed:
Error thrown
Class 'C_NextGen_Settings' not found
On every single page. You cannot even login to your WordPress admin panel.
The formatting of the error
... Continue readingThe WordPress Backdoor Scandal: Why 30+ “Trusted” Plugins Just Turned Malicious
This recent security breach in the WordPress ecosystem is a massive wake-up call for website owners. A portfolio of over 30 plugins was sold to a new owner who immediately weaponized them with backdoors.
If you use UltimateWB, you are in a much safer position than the average WordPress user - and here is why.
The Attack: What Happened?
A portfolio of 30+ plugins (formerly under "WP Online Support," now "Essential Plugin") was sold on Flippa for a six-figure
... Continue reading