Persistent WordPress User Injection


Persistent WordPress User Injection

Our team recently stumbled across an interesting example of malicious code used to add an arbitrary user inside WordPress.

The following code was detected at the bottom of the theme’s functions.php. It uses internal WordPress functions like wp_create_user() and add_role() to create a new user and elevate its role to “administrator:”

The most interesting component of this sample is that the init (initialization) hook called from add_action() triggers the prefix_add_user() every time the Website finishes loading.

Continue reading Persistent WordPress User Injection at Sucuri Blog.


Source link

What do you think?


Written by Krasimir Konov

Years Of Membership


Leave a Reply

Your email address will not be published. Required fields are marked *



Kalium – Creative Theme for Professionals

Taking care of your mental health in uncertain times, with Dr. Sherry Walling • Post Status