This site uses cookies. By continuing to browse this site you are agreeing to our use of cookies. Find out more.X

RandomStorm launches WordPress application scanner

Share this article:

RandomStorm has launched a free scanner for WordPress administrators to check their blog apps for vulnerabilities.

Developed by penetration tester Ryan Dewhurst for the security management and compliance vendor, it said that the WordPress Scanner software enables users to check for any plug-ins or vulnerabilities that could leave blogs and websites open to hackers.

Dewhurst said: “Sometimes it is not easy to spot when a blog has been compromised. Hackers use tactics such as inserting infected iFrames, which look like normal pictures on the web page, but which can be used to initiate drive-by downloads of malware to visitors' computers. This sort of activity can get your site blacklisted so it's important to scan for vulnerabilities and remove them.”

WordPress has been hit by two security incidents this year: firstly, with it being hit by a large distributed denial-of-service (DDoS) attack that left users locked out; and secondly, a month later its parent site was hacked that left code belonging to both the company and its partners exposed.

Andrew Mason, technical director at RandomStorm, said: “WordPress Scanner forms part of RandomStorm's overall service to help companies to close vulnerabilities in their web applications and improve security for their business and their customers.”

The WordPress Scanner is a black box tool developed using the Ruby programming language. It is available for free download from today.

Share this article:

SC webcasts on demand

This is how to secure data in the cloud


Exclusive video webcast & Q&A sponsored by Vormetric


As enterprises look to take advantage of the cloud, they need to understand the importance of safeguarding their confidential and sensitive data in cloud environments. With the appropriate security safeguards, such as fine-grained access policies, a move to the cloud is as, or more, secure than an on-premise data storage.


View the webcast here to find out more

More in News

34 European banks hit by Android app security attacks

34 European banks hit by Android app security ...

Banks need to put their heads together to develop common and more secure methodologies says Sarb Sembhi, STORM Guidance, following operation Emmental.

Entrepreneur develops hacked data search engine

Entrepreneur develops hacked data search engine

A Portuguese entrepreneur is said to have developed a specialised search engine that can allow access to leaked or allegedly stolen access credentials.

Insider threat levels from ex-staffers greater than expected

Insider threat levels from ex-staffers greater than expected

A third of of ex-employees have access to company data and 9 percent have used their access privileges, says new research.