WP No External Links 4.2.1-4.2.2 - Backdoored

Sign up to our free email alerts service for instant vulnerability notifications!

Description
Even though one of the WP dev removed the malicious code and released version 4.3 (https://plugins.trac.wordpress.org/browser/wp-noexternallinks?rev=1791413), the plugin is still closed for new installs.

Affects Plugin

fixed in version 4.3

References

URL https://www.wordfence.com/blog/2017/12/plugin-backdoor-supply-chain/

Classification

Type BACKDOOR

Miscellaneous

Submitter erwanlr
Submitter Website https://wpscan.org
Submitter Twitter erwan_lr
Views 208
Verified Yes
WPVDB ID 8986

Timeline

Publicly Published 2017-12-28 (4 months ago)
Added 2017-12-28 (4 months ago)
Last Updated 2018-04-12 (13 days ago)

Copyright & License

Copyright All data and resources contained within this page and this web site is Copyright © The WPScan Team.
License Some of this data may be used for non-commercial purposes, however, any potential commercial usage of this data will require a license. If you would like to inquire about a commercial license please contact us.