Hello,<\/p>\n
I just got a message from my client. The were contacted from another company who had their site hacked. They had used sucuri to identify that loads of html files had been loaded into a scripts folder within the limit-login-attempts plugin folder. The infection got in through an inserted line in limit-login-attempts.php.<\/p>\n
The html files in the new scripts folder were all retail things for Christian Louboutin shoes and similar things. There were about 50 files.<\/p>\n
I went to check the site and the login page had been blocked due to to many attempts – I hadn’t attempted any log in on that site for a few weeks.<\/p>\n
Is there a security flaw on this plugin now? I have deleted it and all the files in the meantime.<\/p>\n
Has anyone else come across this?<\/p>\n
https:\/\/wordpress.org\/plugins\/limit-login-attempts\/<\/p>\n","protected":false},"template":"","class_list":["post-4581351","topic","type-topic","status-closed","hentry","topic-tag-brute-force"],"jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/topic\/4581351","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/topic"}],"about":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/types\/topic"}],"version-history":[{"count":0,"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/topic\/4581351\/revisions"}],"wp:attachment":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/media?parent=4581351"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}