WP sites across the world hacked

[Morticia]

I got this message from WordFence:
Yesterday we published numbers indicating how widespread the defacement campaign is targeting the REST-API vulnerability recently fixed in WordPress 4.7.2.
If you haven’t already updated to WordPress 4.7.2, it is only a matter of time until you are hit by this.
If you want to read the entire blog post here it is.
The other blog post I skimmed related to Chrome stating sites that are not https will be labeled as 'not secure'. Something on my list for next week.

 

[Momma Smurf]

Updated WP and have WordFence Pro. Still waiting for the new Striking update. Was supposed to be released January 15 to 20.

 

[EmptyNest]

I already told you about the https thing. Your host has already installed let's encrypt onyour site. You just now need to install Really Simple SSL plugin
takes only a minute to do. If you don't use the https you will notice a note secure note there in Chrome

 

[Morticia]

I already told you about the https thing. Your host has already installed let's encrypt onyour site. You just now need to install Really Simple SSL plugin
takes only a minute to do. If you don't use the https you will notice a note secure note there in Chrome.

I already told you about the https thing. Your host has already installed let's encrypt onyour site. You just now need to install Really Simple SSL plugin
takes only a minute to do. If you don't use the https you will notice a note secure note there in Chrome

But, don't I also have to update Google Webmaster Tools?
Right now I'm trying to shovel my way out of the house and also get my package prices up to date!

 

[EmptyNest]

I already told you about the https thing. Your host has already installed let's encrypt onyour site. You just now need to install Really Simple SSL plugin
takes only a minute to do. If you don't use the https you will notice a note secure note there in Chrome.

I already told you about the https thing. Your host has already installed let's encrypt onyour site. You just now need to install Really Simple SSL plugin
takes only a minute to do. If you don't use the https you will notice a note secure note there in Chrome

But, don't I also have to update Google Webmaster Tools?
Right now I'm trying to shovel my way out of the house and also get my package prices up to date!
.

Simple just add a new property and choose https

 

[dumitru]

The problem with such vulnerabilities is that they always bring a lot of brute-force attacks and scans of all websites, no matter what version they are using.
So even if you updated at the correct time - the servers are still getting hit by a lot of incoming requests, so that causes another range of issues.
I wish they would wait at least 2 weeks before revealing such vulnerabilities... Oh well...