WordPress founder claims Apple cut off updates to his completely free app because it wants 30 percent

This sounds ridiculous

WordPress, the iOS app, lets you build and manage a website right from your iPhone or iPad, for free.

Separately, WordPress.com also happens to sell domain names and fancier website packages.

Now, WordPress founding developer Matt Mullenweg is accusing Apple of cutting off the ability to update that app — until or unless he adds in-app purchases so the most valuable company in the world can extract its 30 percent cut of the money.

https://www.theverge.com/2020/8/21/21396316/apple-wordpress-in-app-purchase-tax-update-store

#Wordpress #Apple

Millions of WordPress sites are being probed & attacked with recent plugin bug

An easy-to-exploit vulnerability in a popular WordPress plugin has triggered an internet-wide hacking spree.

Millions of WordPress sites have been probed and attacked this week, Defiant, the company behind the Wordfence web firewall said on Friday.

The sudden spike in attacks happened after hackers discovered and started exploiting a zero-day vulnerability in "File Manager," a popular WordPress plugin installed on more than 700,000 sites.

The zero-day was an unauthenticated file upload vulnerability that allowed an attacker to upload malicious files on a site running an older version of the File Manager plugin.

https://www.zdnet.com/article/millions-of-wordpress-sites-are-being-probed-attacked-with-recent-plugin-bug/

#Wordpress #plugin #vulnerability #hacking

WordPress drops Twitter social sharing due to API price hike | Mashable – https://mashable.com/article/wordpress-drops-twitter-jetpack-social-sharing

#Wordpress #Twitter

Playing Possum: What's the Wpeeper Backdoor Up To? | XLab_qianxin

On April 18, 2024, XLab's threat hunting system detected an ELF file with zero detections on VirusTotal being distributed through two different domains. One of the domains was marked as malicious by three security firms, while the other was recently registered and had no detections, drawing our attention. Upon analysis, we confirmed that this ELF was malware targeting Android systems, utilizing compromised WordPress sites as relay C2 servers, and we named it Wpeeper.

Wpeeper is a typical backdoor Trojan for Android systems, supporting functions such as collecting sensitive device information, managing files and directories, uploading and downloading, and executing commands.

Via @androidmalware
#Android #Trojan #Possum #Wpeeper
#WordPress