Most of the WordPress security problems we see are caused by poor management of the CMS, including actions like installing themes from untrusted sources.
Southfield, MI (PRWEB) June 27, 2016
Future Hosting, a managed VPS hosting provider, has warned WordPress hosting clients to be wary of plugins and themes downloaded from unverified sources. Many such plugin and themes are infected with malware (as reported by WordPress security researchers at Sucuri). By installing compromised plugins and themes, WordPress site owners expose their users to serious security risks.
Malware is a particular problem for so-called nulled premium themes. Criminals take legitimate premium themes which the developers charge for, insert malware code into them, and release them as free versions. Tempted by the lower cost, WordPress users often install these themes, thereby opening their WordPress site to the attacker and any software he or she may want to install.
“We provide hosting for thousands of WordPress sites. The WordPress application itself is quite secure, especially when it’s hosted on a secure platform,” said Maulesh Patel, VP of Operations of Future Hosting, “Most of the WordPress security problems we see are caused by poor management of the CMS, including actions like installing themes from untrusted sources. We strongly recommend that users download themes from official repositories or reputable developers.”
Injecting malicious code into a site is the goal of most attacks against WordPress. Usually that’s difficult to do because the attacker has to find some way to breach the security of the server or content management system. If users install nulled themes, they’re doing the attacker’s work for them.
Plugins and themes should be downloaded from the official WordPress Plugin Repository or Theme Repository. Premium themes are available from many sources, but WordPress users should ensure that they download from a reputable marketplace, or from the sites of the theme or plugin developer.
About Future Hosting, LLC
Founded in 2001, Future Hosting is a privately held leading Internet solutions provider specializing in managed hosting, including Dedicated Servers, Virtual Private Servers, and Hybrid Virtual Private Servers. The company has built a strong reputation for its high-quality service, innovative pricing models, and 3-hour Service Level Agreement. Future Hosting is based in Southfield, Michigan. For more information, visit http://www.futurehosting.com