My wordfence plugin blocked a bulgarian ip address.
When investigating this ip address I found a webpage on websecurity where this ipaddress is linked to con1.sometimesfree[.]biz/c.js.
On this webpage they also mention tagDiv Newspaper vulnerabilities. Is the info on that page correct and if so are these vulnerabilities solved? Here is the text and link:
Over the summer we’ve seen waves of WordPress database infections that use vulnerabilities in tagDiv’s Newspaper/Newsmag themes or InterconnectIT Search and Replace scripts (searchreplacedb2.php).
http://www.calgaryfreeclassifieds.ca/web-security/
Yes, if you dont update wordpress or plugins or themes when security patches ate released, you may get hacked.
See my [tutorial] post on learning to secure your site and also fix your hacked site.
Good time to implement security policy for using wordpress!
Thank you Chris S for the information!
