{"id":39665,"date":"2018-11-12T15:31:41","date_gmt":"2018-11-12T13:31:41","guid":{"rendered":"https:\/\/blog.superhosting.bg\/?p=39665"},"modified":"2022-04-02T10:41:07","modified_gmt":"2022-04-02T07:41:07","slug":"gdpr-compliance-secured-superhosting","status":"publish","type":"post","link":"https:\/\/blog.superhosting.bg\/en\/gdpr-compliance-secured-superhosting.html","title":{"rendered":"Vulnerability in the WP GDPR Compliance Plugin is Secured at SuperHosting.BG Servers"},"content":{"rendered":"

The recently discovered vulnerability<\/a> in the WP GDPR Compliance plugin<\/a> which facilitates the implementation of GDPR on WordPress websites is now neutralized.<\/p>\n

Important<\/strong>: WordPress websites of all SuperHosting.BG customers are already protected against the vulnerability detected in the WP GDPR Compliance plugin. The protection has been immediately applied to our SH Protect<\/a> system. Despite the protection we recommend updating the plugin WP GDPR Compliance as soon as possible.<\/div>\n

What is this vulnerability?<\/strong><\/h4>\n

The vulnerability in this plugin enables third parties to create administrative accounts in WordPress websites. Once such a user is generated, the website settings can be very easily changed and database modified. Files can be uploaded as well as anything else a fully legitimate admin account can perform.<\/p>\n

The WP GDPR Compliance plugin is one of the many plugins providing help features for implementing GDPR requirements on a website. Some of those features are enabling a consent checkbox for processing personal data, an option for individuals to access their personal data collected in a suitable file format as well as the option for users to be erased (forgotten).<\/p>\n

How is the vulnerability manifested?<\/strong><\/h4>\n

In case your website is using the plugin and up to now you have not updated it, you should check its current status.<\/p>\n

The first and most sure sign there is something wrong on the website is the availability of one or more additional users with administrative rights. Popular names for such malicious users are: t2trollherten<\/strong> and t3trollherten<\/strong>. If you find such users, remove them from your website.<\/p>\n

Other signs might include:<\/p>\n

    \n
  • Website not loading or another website loading instead (erealitatea[.]net);<\/li>\n
  • Slowing down the website due to added external resources to malicious websites;<\/li>\n
  • Inability to log in into the administration;<\/li>\n
  • Administration of the website not loading, but another website loading instead;<\/li>\n
  • Added or modified options in the database (wp_options table);<\/li>\n
  • Suspicious cron jobs in cPanel, etc.<\/li>\n<\/ul>\n

    In case you discover one of the abovementioned:<\/p>\n

      \n
    • If your website is hosted by us, it has already been protected against this vulnerability<\/strong>. If you find something confusing in relation to the website\u2019s operation, contact us so we can investigate.<\/li>\n
    • If your website is not hosted at SuperHosting.BG, you can restore it from backup after you find out it has been affected by this vulnerability. If possible and you have a backup available, recover database to the date before malicious users appeared on your website. If for one reason or another you cannot recover your website, you will need to look through your files, users, plugins, cron jobs and the website database.<\/li>\n<\/ul>\n

      We highly recommend updating the WP GDPR Compliance plugin<\/strong><\/h4>\n

      Thanks to the immediate reaction of our team the websites which were harmed were just a few, but all of them received an email notifying about the problem and providing further information on the protection and actions needed for updating the plugin.<\/p>\n

      We will keep tracking our customers\u2019 websites for potential dangers. Each protection method added strengthens the security level of our system SH Protect which also means your websites are highly secured.<\/p>\n

      Check out our Blog regularly so that you do not miss important news and discoveries for the most popular CMS and fixed vulnerabilities.<\/p>\n","protected":false},"excerpt":{"rendered":"

      The recently discovered vulnerability in the WP GDPR Compliance plugin which facilitates the implementation of GDPR on WordPress websites is now neutralized.<\/p>\n","protected":false},"author":16,"featured_media":62576,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"_lmt_disableupdate":"","_lmt_disable":"","footnotes":""},"categories":[126,54],"tags":[136],"class_list":{"0":"post-39665","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-superhosting-news-en","8":"category-wordpress","9":"tag-security-system"},"aioseo_notices":[],"modified_by":"\u041c\u0430\u0434\u043b\u0435\u043d\u0430 \u041c\u0435\u0442\u043e\u0434\u0438\u0435\u0432\u0430","post_mailing_queue_ids":[],"_links":{"self":[{"href":"https:\/\/blog.superhosting.bg\/en\/wp-json\/wp\/v2\/posts\/39665","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.superhosting.bg\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.superhosting.bg\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.superhosting.bg\/en\/wp-json\/wp\/v2\/users\/16"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.superhosting.bg\/en\/wp-json\/wp\/v2\/comments?post=39665"}],"version-history":[{"count":2,"href":"https:\/\/blog.superhosting.bg\/en\/wp-json\/wp\/v2\/posts\/39665\/revisions"}],"predecessor-version":[{"id":65237,"href":"https:\/\/blog.superhosting.bg\/en\/wp-json\/wp\/v2\/posts\/39665\/revisions\/65237"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/blog.superhosting.bg\/en\/wp-json\/wp\/v2\/media\/62576"}],"wp:attachment":[{"href":"https:\/\/blog.superhosting.bg\/en\/wp-json\/wp\/v2\/media?parent=39665"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.superhosting.bg\/en\/wp-json\/wp\/v2\/categories?post=39665"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.superhosting.bg\/en\/wp-json\/wp\/v2\/tags?post=39665"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}