This site uses cookies. By continuing to browse this site you are agreeing to our use of cookies. Find out more.X

RandomStorm launches WordPress application scanner

Share this article:

RandomStorm has launched a free scanner for WordPress administrators to check their blog apps for vulnerabilities.

Developed by penetration tester Ryan Dewhurst for the security management and compliance vendor, it said that the WordPress Scanner software enables users to check for any plug-ins or vulnerabilities that could leave blogs and websites open to hackers.

Dewhurst said: “Sometimes it is not easy to spot when a blog has been compromised. Hackers use tactics such as inserting infected iFrames, which look like normal pictures on the web page, but which can be used to initiate drive-by downloads of malware to visitors' computers. This sort of activity can get your site blacklisted so it's important to scan for vulnerabilities and remove them.”

WordPress has been hit by two security incidents this year: firstly, with it being hit by a large distributed denial-of-service (DDoS) attack that left users locked out; and secondly, a month later its parent site was hacked that left code belonging to both the company and its partners exposed.

Andrew Mason, technical director at RandomStorm, said: “WordPress Scanner forms part of RandomStorm's overall service to help companies to close vulnerabilities in their web applications and improve security for their business and their customers.”

The WordPress Scanner is a black box tool developed using the Ruby programming language. It is available for free download from today.

Share this article:

SC webcasts on demand

This is how to secure data in the cloud

Exclusive video webcast & Q&A sponsored by Vormetric

As enterprises look to take advantage of the cloud, they need to understand the importance of safeguarding their confidential and sensitive data in cloud environments. With the appropriate security safeguards, such as fine-grained access policies, a move to the cloud is as, or more, secure than an on-premise data storage.

View the webcast here to find out more

More in News

Gameover Trojan 'surges' after police takedown

Gameover Trojan 'surges' after police takedown

What constitutes winning in the fight against malware, and what's the value of a takedown ask commentators in the wake of Gameover Zeus' bounceback.

Privacy fears as US court rules against Microsoft

Privacy fears as US court rules against Microsoft ...

A New York court has told Microsoft it must hand over customer data to the US Government even though it's held overseas - reigniting a privacy debate that has also ...

Researcher develops BadUSB code to compromise USB sticks - and their computer hosts

Researcher develops BadUSB code to compromise USB sticks ...

Karsten Nohl also reveals how an enhanced security approach can beat his USB architecture compromise.