This site uses cookies. By continuing to browse this site you are agreeing to our use of cookies. Find out more.X

RandomStorm launches WordPress application scanner

Share this article:

RandomStorm has launched a free scanner for WordPress administrators to check their blog apps for vulnerabilities.

Developed by penetration tester Ryan Dewhurst for the security management and compliance vendor, it said that the WordPress Scanner software enables users to check for any plug-ins or vulnerabilities that could leave blogs and websites open to hackers.

Dewhurst said: “Sometimes it is not easy to spot when a blog has been compromised. Hackers use tactics such as inserting infected iFrames, which look like normal pictures on the web page, but which can be used to initiate drive-by downloads of malware to visitors' computers. This sort of activity can get your site blacklisted so it's important to scan for vulnerabilities and remove them.”

WordPress has been hit by two security incidents this year: firstly, with it being hit by a large distributed denial-of-service (DDoS) attack that left users locked out; and secondly, a month later its parent site was hacked that left code belonging to both the company and its partners exposed.

Andrew Mason, technical director at RandomStorm, said: “WordPress Scanner forms part of RandomStorm's overall service to help companies to close vulnerabilities in their web applications and improve security for their business and their customers.”

The WordPress Scanner is a black box tool developed using the Ruby programming language. It is available for free download from today.

Share this article:

SC webcasts on demand

This is how to secure data in the cloud


Exclusive video webcast & Q&A sponsored by Vormetric


As enterprises look to take advantage of the cloud, they need to understand the importance of safeguarding their confidential and sensitive data in cloud environments. With the appropriate security safeguards, such as fine-grained access policies, a move to the cloud is as, or more, secure than an on-premise data storage.


View the webcast here to find out more

More in News

Industry divided as Met Police recommends smartphone PINs

Industry divided as Met Police recommends smartphone PINs

After two years of quietly lobbying mobile phone manufacturers such as Apple and Samsung, the Metropolitan Police have gone public with its request for all mobile phone vendors to implement ...

New TorrentLocker ransomware trades on fear of CryptoLocker

New TorrentLocker ransomware trades on fear of CryptoLocker

A new breed of ransomware called TorrentLocker that mimics more feared versions like CryptoLocker and CryptoWall has been discovered targeting users in Australia.

UK Ministry of Defence launches £2 million cyber defence competition

UK Ministry of Defence launches £2 million cyber ...

The British government has kicked-off a £2 million contest to find new ways to protect the Ministry of Defence (MoD) computer systems from cyber-attacks using automated threat response.