Best Blackhat Forum

(01-13-2018 04:13 PM)bale Wrote: [ -> ]Someone commented on their codecanyon page. I'm curious how they respond considering they sell a security plugin.

They declined that and blame to others

Quote:They declined that and blame to others

Of course

@Chupach any chance to v5.5.5? Thanks.

5.5.5 – 10/27/2017

Quote:- Fixed: WordPress Social Login Path Issue
- Improved: WooCommerce Wapanalyzer Support
- Fixed: Browser cache setting can be configured
- Added: Support for our new plugin - Scan My WP (WordPress Security Scanner)

in this new version 5.5.5 still infected to the exploit code?

(02-08-2018 02:27 AM)JFOC Wrote: [ -> ]in this new version 5.5.5 still infected to the exploit code?

I don't know. Just downloaded from Codecanyon. You can check it on sandbox site.

(02-08-2018 02:27 AM)JFOC Wrote: [ -> ]in this new version 5.5.5 still infected to the exploit code?

YES! I just checked it. It still generates malicious code in the wp_options table.

Dl'd Chupach's v555 from OP
Created a new, clean WP install with no changes
Installed and Activated v555 from Chupach
Checked phpmyadmin (Mysql databases)
hidemywp>>wp_options>>pp_important_messages
hidemywp>>wp_options>>trust_network_rules

The same code listed by CreativeMedia in his post #22 is still there.

The Developers need to know about this!!!

(02-08-2018 02:48 AM)Vmax Wrote: [ -> ]

(02-08-2018 02:27 AM)JFOC Wrote: [ -> ]in this new version 5.5.5 still infected to the exploit code?

YES! I just checked it. It still generates malicious code in the wp_options table.

Dl'd Chupach's v555 from OP
Created a new, clean WP install with no changes
Installed and Activated v555 from Chupach
Checked phpmyadmin (Mysql databases)
hidemywp>>wp_options>>pp_important_messages
hidemywp>>wp_options>>trust_network_rules

The same code listed by CreativeMedia in his post #22 is still there.

The Developers need to know about this!!!

I've already reported this sh!t to Envato and they said "nothing malicious going on." And the owner declined and blaming to others

(02-08-2018 03:37 AM)Chupach Wrote: [ -> ]I've already reported this sh!t to Envato and they said "nothing malicious going on." And the owner declined and blaming to others

That's not exactly reassuring. Then again, Envato have a history of not giving a sh*t about stuff being sold on their site.

(02-08-2018 10:44 AM)kirstie Wrote: [ -> ]

(02-08-2018 03:37 AM)Chupach Wrote: [ -> ]I've already reported this sh!t to Envato and they said "nothing malicious going on." And the owner declined and blaming to others

That's not exactly reassuring. Then again, Envato have a history of not giving a sh*t about stuff being sold on their site.

Yeah right, so if anyone using this plugin, they must be own their risk.