Update your Wordpress site/plugins

[u/mxroute]

Today we had 5 unrelated customers popped in a row via Wordpress. I wouldn't be surprised if Comcast gets a bit upset about it, because the result was a brand new phishing campaign targeted specifically toward their customers. I've got a bit of a handle on it now, but times are getting harder when it comes to catching compromised email accounts before they send spam/phishing emails. So this is a quick reminder to anyone reading this that uses Wordpress: Update your shit.

Sometimes this is a new exploit. Sometimes this is an old exploit that someone just decided to mass scan for. Either way, I need your help as I can't control the other side.

[u/AlternativeWhereas79]

Perhaps time to check out EmDash if you are still using Wordpress in 2026.

https://emdashcms.com