This site uses cookies. By continuing to browse this site you are agreeing to our use of cookies. Find out more.X

RandomStorm launches WordPress application scanner

Share this article:

RandomStorm has launched a free scanner for WordPress administrators to check their blog apps for vulnerabilities.

Developed by penetration tester Ryan Dewhurst for the security management and compliance vendor, it said that the WordPress Scanner software enables users to check for any plug-ins or vulnerabilities that could leave blogs and websites open to hackers.

Dewhurst said: “Sometimes it is not easy to spot when a blog has been compromised. Hackers use tactics such as inserting infected iFrames, which look like normal pictures on the web page, but which can be used to initiate drive-by downloads of malware to visitors' computers. This sort of activity can get your site blacklisted so it's important to scan for vulnerabilities and remove them.”

WordPress has been hit by two security incidents this year: firstly, with it being hit by a large distributed denial-of-service (DDoS) attack that left users locked out; and secondly, a month later its parent site was hacked that left code belonging to both the company and its partners exposed.

Andrew Mason, technical director at RandomStorm, said: “WordPress Scanner forms part of RandomStorm's overall service to help companies to close vulnerabilities in their web applications and improve security for their business and their customers.”

The WordPress Scanner is a black box tool developed using the Ruby programming language. It is available for free download from today.

Share this article:

SC webcasts on demand

This is how to secure data in the cloud


Exclusive video webcast & Q&A sponsored by Vormetric


As enterprises look to take advantage of the cloud, they need to understand the importance of safeguarding their confidential and sensitive data in cloud environments. With the appropriate security safeguards, such as fine-grained access policies, a move to the cloud is as, or more, secure than an on-premise data storage.


View the webcast here to find out more

More in News

GCHQ 'spied on Germany's Deutsche Telekom'; Germans sell spyware

GCHQ 'spied on Germany's Deutsche Telekom'; Germans sell ...

UK and US spies reported to spy on Deutsche Telekom in Snowden documents, while Germany's FinFisher accused of supplying surveillance software to repressive regimes.

Amazon's £600m Twitch gaming site hit by malware

Amazon's £600m Twitch gaming site hit by malware

The Twitch.tv online gaming platform, which is now owned by Amazon and has more than 55 million monthly viewers, has been infected with malware that spends users' money without their ...

China's cyber spying 'production line' approach no game for amateurs

China's cyber spying 'production line' approach no game ...

Chinese cyber-spying production line shares tools and tactics between different groups suggesting cooperation or at least similar training.