Ich kriege in den letzten paar Wochen immer wieder, zum Teil stündlich, Emails über fehlgeschlagene Loginversuche auf meinem Blog:
Failed login by IP [ip_address] [url]
(IP und URL ersetzt)
Es ist ein Wordpress in meinem Strato-Webspace, dass auch zT von Strato automatisch geupdatet wird.
Muss ich mir da Sorgen machen?
Muss ich irgendwas unternehmen?
Read More #WordPress #WPDevDocs https://developer.wordpress.org/block-editor/reference-guides/core-blocks/core-blocks-theme/core-block-read-more/?utm_source=mastodon&utm_medium=social&utm_campaign=fedica-DevDocs
夜分にお疲れさまです。
WordPress 用 AI チャットボットプラグイン「Rapls AI Chatbot」のガイド記事を大幅リライトしました。
OpenAI / Claude / Gemini / OpenRouter 対応、RAG、ナレッジベース、Free / Pro の機能整理まで、実運用視点で解説しています。
https://raplsworks.com/rapls-ai-chatbot-guide/
Two-Factor-Authentifizierung für WordPress
Ich weiß ja nicht, wie es euch so mit WordPress geht. Ich habe allerdings sehr häufig Anmeldeversuche. Damit hier nichts schief gehen kann, verwende ich in WordPress eine Two-Factor-Authentifzierung. D.h. selbst bei korrekten Anmeldedaten, muss ich das Login noch über ein anderes Medium zulassen.
[…]
https://c0d1.eu/two-factor-authentifizierung-fuer-wordpress/?mtm_campaign=mastodonblog #Security #Sicherheit #WordPress
After a user reported a security issue in the Pro version of WPFactory’s EU/UK VAT for WooCommerce plugin, distributed[...]
#WordPress #Security #WPFactory
Want to launch your website without spending a single rupee? 🚀
You can now get free domain + free hosting for WordPress and start building your online presence today. Whether you're a beginner, blogger, or small business owner, this is the easiest way to get started with zero investment.
👉 Get your free domain now: https://googiehost.com/freedomains
#WordPress #FreeHosting #FreeDomain #Blogging #WebsiteSetup #StartOnline

🔎 CVE-2026-5324: HIGH (CVSS 7.2) XSS in Brizy – Page Builder (≤2.8.11) lets unauth'd attackers inject scripts into form data. Admins risk session hijack viewing Leads. Restrict access, monitor for patches. https://radar.offseq.com/threat/cve-2026-5324-cwe-79-improper-neutralization-of-in-973821a2 #OffSeq #WordPress #XSS #Vuln

Most website hacks start small:
- outdated plugins
- weak configs
- no monitoring
- missed patches
Managed hosting helps reduce these risks through better infrastructure management.
Read more: https://olvy.io/PBkTq
#WordPress #Hosting #Security #DevOps #Infosec #SelfHosted #webhosting #woocommerce #managedHosting #managedcloud
🚨 CRITICAL: CVE-2026-7458 in User Verification by PickPlugins (≤2.0.46) enables auth bypass via weak OTP checks. Attackers can log in as any verified user, including admins. No patch yet — disable or restrict plugin! https://radar.offseq.com/threat/cve-2026-7458-cwe-288-authentication-bypass-using--78b8e551 #OffSeq #WordPress #Vuln

Need feedback. I'll share stories via @ododopress but hate that #wordpress has no print-style layout for text, indent first line of, and no space between, paragraphs. (Really, why?) So I installed a plugin, Simple eBook Viewer, that allows me to embed epub in my post, giving an ebook reader layout. See this example at the bottom of the page in this first tale.
https://www.ododopress.com/african-folk-tales/an-indian-story/
But is this nice or would it be cumbersome reading epub in a blog post?
#writing #writingcommunity #amreading
🚨 CRITICAL: CVE-2026-4882 in WPEverest User Registration Advanced Fields ≤1.6.20 lets unauthenticated attackers upload dangerous files via Profile Picture field — possible RCE. Disable this field until patched! https://radar.offseq.com/threat/cve-2026-4882-cwe-434-unrestricted-upload-of-file--0d013f12 #OffSeq #WordPress #Security #CVE20264882

こんにちは。
WordPress プラグインの SVN 操作について。
TortoiseSVN(Windows)、コマンドライン、GitHub Actions 経由(10up/action-wordpress-plugin-deploy)、それぞれ向き不向きがある。個人開発で頻繁に更新するなら GitHub Actions 連携が一番楽。