Malware found ioptimize.php
-
Hello Folks,
We have found a malicious plugin on several WordPress sites on several webhosts.
The plugin is called ioptimization, and would allow file uploads when opened directly (/wp-content/plugins/ioptimization/IOptimize.php). Luckily Wordfence is blocking this in our cases.
It does not seem to be because of another plugin, as websites with different plugins had this infection and on different servers, so I’m afraid this is a WordPress Core exploit.
This malicious plugin appeared 4 days ago (8 Feb), all around the same time.
So far, the damage has been minimal, but it’s more worrying this appeared in our sites in the first place.
I hope I posted this in the right place.[malware code removed]
Hope this will be useful to someone
-
It’s not malware on it’s own, again, did you read it at all? Or what the code does?
The main issue being that this appeared on several sites, with different plugins on different hosts. Something worthwhile for the WordPress dev’s to investigate, i’d say.
- The topic ‘Malware found ioptimize.php’ is closed to new replies.