{"id":26069,"date":"2024-02-08T10:56:50","date_gmt":"2024-02-08T10:56:50","guid":{"rendered":"https:\/\/crowdfundjunction.com\/blog\/singapore-cybersecurity-agency-issues-alert-on-wordpress-plugin-vulnerability\/"},"modified":"2024-02-08T10:56:50","modified_gmt":"2024-02-08T10:56:50","slug":"singapore-cybersecurity-agency-issues-alert-on-wordpress-plugin-vulnerability","status":"publish","type":"post","link":"https:\/\/crowdfundjunction.com\/blog\/singapore-cybersecurity-agency-issues-alert-on-wordpress-plugin-vulnerability\/","title":{"rendered":"Singapore Cybersecurity Agency Issues Alert on WordPress Plugin Vulnerability"},"content":{"rendered":"

(Originally posted on : Crypto News – iGaming.org )<\/b>
\n<\/p>\n

\n

A warning has been issued by the Cybersecurity Agency of Singapore (CSA) in relation to the WordPress plugin \u201cCryptocurrency Widgets \u2013 Price Ticker & Coins List\u201d. An alert from the CSA states that versions 2.0 to 2.6.5 are vulnerable to SQL exploits through the use of the \u2018coinslist\u2019 argument.<\/p>\n

According to the CSA, the vulnerability results from poor escape on user-supplied arguments and poor planning on pre-existing SQL queries. This vulnerability might enable unauthorized attackers to insert more SQL queries, increasing the possibility that private information could be taken from a website\u2019s database.<\/p>\n

Plugin Details and Developer Information<\/strong><\/h2>\n

According to material on the WordPress website, Narinder Singh is credited as co-founding CryptocurrencyPlugins by CoolPlugins.net, and this is the plugin in dispute.<\/p>\n

Though it has amassed more than 10,000 downloads and has a five-star rating from more than 150 reviews on WordPress\u2019 marketplace, it is unclear exactly how many people are impacted. While the plugin\u2019s page indicates that there has been an update to 2.6.6, it is unclear if this most recent version resolves the issue. CoolPlugins.net hasn\u2019t made any public remarks on the situation as of yet.<\/p>\n

A related incident from October 2023 was covered by crypto.news, which revealed a concerning pattern in which malevolent individuals used BNB Chain\u2019s smart contracts to spread malware, specifically aimed at WordPress websites. Cybersecurity specialists warn that hackers might secretly incorporate dangerous scripts into smart contracts and turn them into free and covert platforms for hosting malicious activity by injecting code that can extract partial payloads from smart contracts.<\/p>\n

\n
\n
\n
\n
\n
Get 125% \/ $2,500 on 1st deposit!<\/strong><\/strong> <\/p>\n

New players only. Exclusive Welcome Bonus of up to $2,500<\/p>\n<\/p><\/div>\n<\/p><\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n

Vigilance and proactive actions are essential to protect against new attacks and vulnerabilities as the cybersecurity landscape changes.<\/p>\n<\/p><\/div>\n

Source link <\/a>
\n
<\/p>\n","protected":false},"excerpt":{"rendered":"

(Originally posted on : Crypto News – iGaming.org ) A warning has been issued by the Cybersecurity Agency of Singapore (CSA) in relation to the WordPress plugin \u201cCryptocurrency Widgets \u2013 Price Ticker & Coins List\u201d. An alert from the CSA states that versions 2.0 to 2.6.5 are vulnerable to SQL exploits through the use of […]<\/p>\n","protected":false},"author":5,"featured_media":26070,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0},"categories":[34],"tags":[],"_links":{"self":[{"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/posts\/26069"}],"collection":[{"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/users\/5"}],"replies":[{"embeddable":true,"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/comments?post=26069"}],"version-history":[{"count":0,"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/posts\/26069\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/media\/26070"}],"wp:attachment":[{"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/media?parent=26069"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/categories?post=26069"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/tags?post=26069"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}