WP No External Links 4.2.1-4.2.2 - Backdoored

Sign up to our free email alerts service for instant vulnerability notifications!

Description
Even though one of the WP dev removed the malicious code and released version 4.3 (https://plugins.trac.wordpress.org/browser/wp-noexternallinks?rev=1791413), the plugin is still closed for new installs.

Affects Plugin

fixed in version 4.3

References

URL https://www.wordfence.com/blog/2017/12/plugin-backdoor-supply-chain/

Classification

Type UNKNOWN

Miscellaneous

Submitter erwanlr
Submitter Website https://wpscan.org
Submitter Twitter erwan_lr
Views 156
Verified Yes
WPVDB ID 8986

Timeline

Publicly Published 2017-12-28 (24 days ago)
Added 2017-12-28 (23 days ago)
Last Updated 2017-12-29 (22 days ago)

Copyright & License

Copyright All data and resources contained within this page and this web site is Copyright © The WPScan Team.
License Some of this data may be used for non-commercial purposes, however, any potential commercial usage of this data will require a license. If you would like to inquire about a commercial license please contact us.