Business Blogging Pros: Wordpress: Author Profile Hacking

May 18, 2015

Wordpress: Author Profile Hacking

I saw this while examining the Wordfence 404 log on a client's site this morning:

Those URLs with ?author=[number] is the hacker trying to learn the usernames of the website's authors. Once the username is know then the hacker can concentrate on figuring out the password.

It's best to block the hacker's IP address because when this approach fails he'll just move on to the next attack. In many cases I'll block the hcker's entire network.

May 18, 2015 6:11:14 AM | Wordpress Security

The comments to this entry are closed.

Watch Those 404s One of the tactics that hackers use is to fish for vulnerabilities. For example, you may see this in your logs: https://mydomain.com/wp-content/plugins/gravityforms/css/formsmain.css You may see that and say, "I don't have GravityForms installed." There is a known vulnerability in older...

Switching from GoToMeeting to StartMeeting This is not really blogging or social media related but I wanted to pass this along. I was a long-time user of GoToMeeting. I primarily use it for webinars and for screen sharing during a one-to-one meeting with a client....