Massive IPs targeting “/wp-json/tdw/save_css”

Posted in: Newspaper
Post count: 108

I noticed today my server is under stress. save_css is being targeted according to my log file.

Please advice.

Thanks.

Post count: 9544

did you try disabling access via htaccess file?

Post count: 108

No,

Post count: 27744

Hi,

Please block /wp-json/tdw/save_css
If an attacker wants to target this URL /wp-json/tdw/save_css they can do so. Even if the website uses a different theme, the attacker can still try that URL. We could add an option to be able to enable/disable the Live CSS, it will be considered. But for now in order to remove it this can only be done with a modification to the composer plugin. I think that all that removing it requires is to comment this line of code – https://prnt.sc/RtwvL5Nc4ikR -> https://prnt.sc/ymZmhdUfp57U But as I mentioned, the attacker can still try to access the URL.

Thank you!

Viewing 4 posts - 1 through 4 (of 4 total)
The forum ‘Newspaper’ is closed to new topics and replies.