Security Update: Improved Parameter Validation Checks
by
7-layers of Security for Your WordPress Site
Your website needs the most comprehensive security to protect it from the constant attacks it faces everyday.
We have fixed a bug in how the MalCare plugin handles a rare invalid request. We haven’t seen it being abused, but it was possible, so we have closed it.
In short: a request with a specific malformed parameter could make the plugin do a lot more work than it should, so someone hammering that endpoint could put extra load on a site’s server.
If you’re a MalCare customer, please rest assured that you’re already protected.
As soon as we found this, we tightened the parameter checks and automatically updated them across all customer sites. To confirm, you can check that your site is running MalCare v6.72.
We’ve also checked the surrounding code for similar cases and added stronger safeguards there as well. We thank Ananda Dhakal from Patchstack for identifying the issue and working with us on the fix.
If you have any questions or concerns, our support team is here to help.
Category:
Share it:
You may also like
-
How to Add CAPTCHA WordPress: Protect Login, Forms, and Comments
If you are searching for a captcha WordPress solution because bots are filling your comments, contact forms, registrations, or login page, you can reduce that activity without putting a challenge…
-
WordPress Core RCE: Hackers Try New Tactics, MalCare Blocks 3.8M Attacks
On July 17, WordPress released an emergency update for 2 core vulnerabilities, which could be chained together to take over a site. In the first week, we saw about 15,000…
-
Signs That a Website Has Been Hacked: How to Check Safely
If you think your WordPress site has been hacked, or your website is behaving strangely, or a visitor has reported something you cannot reproduce, the signs may appear in Google,…
How can we help you?
If you’re worried that your website has been hacked, MalCare can help you quickly fix the issue and secure your site to prevent future hacks.
My site is hacked – Help me clean it
Clean your site with MalCare’s AntiVirus solution within minutes. It will remove all malware from your complete site. Guaranteed.
Secure my WordPress Site from hackers
MalCare’s 7-Layer Security Offers Complete Protection for Your Website. 300,000+ Websites Trust MalCare for Total Defence from Attacks.
