MalCare Releases Plugin Update with Improved Authentication Systems
by
7-layers of Security for Your WordPress Site
Your website needs the most comprehensive security to protect it from the constant attacks it faces everyday.
Recently, a security researcher reached out to us. He disclosed a limitation in the authentication system of our plugin. We responded to the security researcher, after conducting our due diligence.
In the rare situation, where a site has a pre-existing, high severity SQL injection vulnerability, an attacker might be able to read the MalCare key. To address such issues, we are further strengthening our authentication systems.
Authentication is a critical system and any improvements must be done in a careful manner. We have reviewed various plugins and best practices in our ecosystem to come up with our solution.
In light of the current public discourse, we are expediting the update of our plugin. We will initiate a rollout by EOD. All your sites will be automatically updated with the latest MalCare plugin as normal.
The MalCare firewall is enabled by default on your site. It includes rules that protect your site from such high-severity SQL injection attacks.
We have seen no evidence of any malicious activities.
We appreciate the work that security researchers put in, and we thank Calvin for his efforts.
Please reach out to our support if you have any questions or concerns.
Category:
Share it:
You may also like
-
Vulnerability Shield 2.0: Faster Alerts, Faster Patches, Central Dashboard
WordPress itself has informed users that the speed and severity of vulnerability exploits will continue to rise as frontier AI models get smarter. So how can you keep your websites…
-
Security Update: Improved Parameter Validation Checks
We have fixed a bug in how the MalCare plugin handles a rare invalid request. We haven’t seen it being abused, but it was possible, so we have closed it….
-
How to Add CAPTCHA WordPress: Protect Login, Forms, and Comments
If you are searching for a captcha WordPress solution because bots are filling your comments, contact forms, registrations, or login page, you can reduce that activity without putting a challenge…
How can we help you?
If you’re worried that your website has been hacked, MalCare can help you quickly fix the issue and secure your site to prevent future hacks.
My site is hacked – Help me clean it
Clean your site with MalCare’s AntiVirus solution within minutes. It will remove all malware from your complete site. Guaranteed.
Secure my WordPress Site from hackers
MalCare’s 7-Layer Security Offers Complete Protection for Your Website. 300,000+ Websites Trust MalCare for Total Defence from Attacks.
