WordPress Default Leaves Millions of Sites Exploitable for DDoS Attacks

[hacker@sr.gov.yu]

http://www.incapsula.com/the-incapsula-blog/item/715-wordpress-security-alert-pingback-ddos


 

[Stackprotector]

http://www.incapsula.com/the-incapsula-blog/item/715-wordpress-security-alert-pingback-ddos


 

Stupid right?

[hacker@sr.gov.yu]

http://core.trac.wordpress.org/ticket/4137


6 year old bug, really? 

[Stackprotector]

http://core.trac.wordpress.org/ticket/4137


6 year old bug, really? 

I just installed a wordpress blog. But i will always advice to keep the basics and throw away any shit you don't need. Also just enabled cloudflare free on it

[hacker@sr.gov.yu]

Better WP Security + Cloud Flare + Mod_Secuity(with OWASP rules) is quite good

[Stackprotector]

Better WP Security + Cloud Flare + Mod_Secuity(with OWASP rules) is quite good

And the biggest problem are the themes. So don't use a leaked old premium theme, or be sure it's clean and every addon included (timthumb) is updated

[hacker@sr.gov.yu]

And the biggest problem are the themes. So don't use a leaked old premium theme, or be sure it's clean and every addon included (timthumb) is updated

Yep, plugins are also a big threat.