The Quick Page/Post Redirect plugin, installed on over 70,000 WordPress sites, contained a hidden backdoor that remained dormant for five years. The vulnerability allows attackers to inject arbitrary code directly into affected websites.
Security researchers discovered the backdoor in the Quick Page/Post Redirect plugin, a widely-used tool for managing URL redirects on WordPress sites. The malicious code was inserted approximately five years ago and went undetected until recently.
The backdoor's functionality enables unauthorized code injection, potentially giving attackers full control over compromised websites. This could lead to data theft, malware distribution, site defacement, or other malicious activities.
With over 70,000 active installations, the plugin's widespread adoption amplified the potential impact of the vulnerability. The dormant nature of the backdoor—remaining inactive until triggered—likely contributed to its extended undetection.
Plugin developers have released security patches addressing the vulnerability. WordPress site administrators using the Quick Page/Post Redirect plugin should update immediately to the patched version.
This incident underscores ongoing security risks within the WordPress plugin ecosystem. While the open-source WordPress platform and its plugins enable flexibility and extensibility, they also present attack surfaces when security is overlooked. Third-party plugins vary widely in security practices and maintenance quality.
Administrators are advised to:
- Update the Quick Page/Post Redirect plugin to the latest version
- Conduct security audits on affected sites
- Review access logs for suspicious activity
- Consider limiting plugin installations to essential, actively-maintained tools
- Enable regular WordPress security monitoring
The discovery highlights the importance of regular security reviews for popular plugins and the need for developers to maintain scrutiny over code changes and contributions.
Americans are systematically targeting and disabling Flock Safety cameras across the country in a decentralized protest movement. The surveillance devices face everything from vandalism to theft as public opposition intensifies.
The US Justice Department has dismantled online infrastructure used by Chinese state-sponsored hackers targeting NASA, the Federal Reserve, and the Senate. The action represents a coordinated effort to disrupt cyber operations against American government agencies and critical infrastructure.
The U.S. Cybersecurity and Infrastructure Security Agency has issued a mandate requiring all federal agencies to patch an actively exploited remote code execution vulnerability in Citrix NetScaler appliances by Saturday.
A new Rowhammer attack called GPUThor can bypass error-correcting code (ECC) protections on NVIDIA GPUs, enabling denial-of-service attacks and root-level privilege escalation.