Bitcoin

Plugin Decentralized Oracle

Security

<h4><strong>The Cyber Security Agency of Singapore (CSA) has reportedly discovered a vulnerability in the “Cryptocurrency Widgets: Price Ticker &amp; Coins List plugin” for WordPress, a web content management platform.</strong></h4> 
<p><span style="font-weight: 400;">The CSA warned that the flaw in the plugin could expose sensitive user information. The National Vulnerability Database (NVD), which is a vulnerability management data repository of the U.S. government, claims that the WordPress crypto plugin is susceptible to SQL Injection via the ‘coinslist’ parameter. </span></p> 
<h5><strong>High Risk in WordPress Crypto Plugin, Security Agents Warn</strong></h5> 
<p><span style="font-weight: 400;">The flaw stems from inadequate escaping on the user-supplied parameter and inadequate preparation on the current SQL query in versions 2.0 to 2.6.5.</span></p> 
<blockquote class="twitter-tweet" data-width="550" data-dnt="true"> 
 <p lang="en" dir="ltr">This <a href="https://twitter.com/hashtag/WordPress?src=hash&amp;ref_src=twsrc%5Etfw">#WordPress</a> <a href="https://twitter.com/hashtag/crypto?src=hash&amp;ref_src=twsrc%5Etfw">#crypto</a> widget plugin can leak sensitive information :<br>According to the security firm CVE Program, the “Cryptocurrency Widgets – Price Ticker &amp; Coins List plugin” WordPress widget carries a critical vulnerability from versions 2.0 through 2.6.5.<br>The Cyber Security… <a href="https://t.co/99UCS3Mcsf">pic.twitter.com/99UCS3Mcsf</a></p> 
 <p>— TOBTC (@_TOBTC) <a href="https://twitter.com/_TOBTC/status/1755496318892446079?ref_src=twsrc%5Etfw">February 8, 2024</a></p>
</blockquote> 
<p><script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script></p> 
<p><span style="font-weight: 400;">The vulnerability could <a href="https://www.csa.gov.sg/alerts-advisories/security-bulletins/2024/sb-2024-006" target="_blank" rel="noopener">reportedly</a> allow attackers to append more structured query language (SQL) requests to pre-existing queries, enabling the extraction of sensitive data from the database.</span></p> 
<p><span style="font-weight: 400;">The plugin was reportedly provided by Narinder Singh, who is purportedly a co-founder of CryptocurrencyPlugins by CoolPlugins.net. In addition, the plugin has had over 10,000 downloads and over 150 five-star reviews. However, it remains unknown how many users are impacted by versions 2.0 to 2.6.5.</span></p> 
<p><img decoding="async" class="alignnone size-full wp-image-133520" src="https://www.altcoinbuzz.io/wp-content/uploads/2024/02/WordPress-Crypto.webp" alt="" width="1270" height="598" srcset="https://www.altcoinbuzz.io/wp-content/uploads/2024/02/WordPress-Crypto.webp 1270w, https://www.altcoinbuzz.io/wp-content/uploads/2024/02/WordPress-Crypto-300x141.webp 300w, https://www.altcoinbuzz.io/wp-content/uploads/2024/02/WordPress-Crypto-1024x482.webp 1024w, https://www.altcoinbuzz.io/wp-content/uploads/2024/02/WordPress-Crypto-768x362.webp 768w, https://www.altcoinbuzz.io/wp-content/uploads/2024/02/WordPress-Crypto-696x328.webp 696w, https://www.altcoinbuzz.io/wp-content/uploads/2024/02/WordPress-Crypto-1068x503.webp 1068w, https://www.altcoinbuzz.io/wp-content/uploads/2024/02/WordPress-Crypto-892x420.webp 892w" sizes="(max-width: 1270px) 100vw, 1270px"></p> 
<p><span style="font-weight: 400;">Recent reports show that bad actors have deployed new skills in attacking crypto platforms. One of the recent <a href="https://www.altcoinbuzz.io/cryptocurrency-news/prosecutors-arrest-bitsonic-executives-for-fraud/" target="_blank" rel="noopener">strategies</a> involves distributing malware through BNB Chain’s smart contracts, specifically aimed at WordPress-powered websites.</span></p> 
<p>Experts warn hackers may use smart contracts for anonymous, malicious hosting by embedding code to fetch payloads.</p> 
<p><a href="https://www.patreon.com/altcoinbuzz" target="_blank" rel="noopener"><img decoding="async" class="aligncenter wp-image-124240" src="https://www.altcoinbuzz.io/wp-content/uploads/2023/09/image-7-1-1-300x37.jpg" sizes="(max-width: 714px) 100vw, 714px" srcset="https://www.altcoinbuzz.io/wp-content/uploads/2023/09/image-7-1-1-300x37.jpg 300w, https://www.altcoinbuzz.io/wp-content/uploads/2023/09/image-7-1-1-1024x127.jpg 1024w, https://www.altcoinbuzz.io/wp-content/uploads/2023/09/image-7-1-1-768x95.jpg 768w, https://www.altcoinbuzz.io/wp-content/uploads/2023/09/image-7-1-1-696x86.jpg 696w, https://www.altcoinbuzz.io/wp-content/uploads/2023/09/image-7-1-1-1068x132.jpg 1068w, https://www.altcoinbuzz.io/wp-content/uploads/2023/09/image-7-1-1.jpg 1197w" alt="Coins" width="714" height="88"></a></p> 
<p><iframe title="Chainlink's Bright Future: Insights from BlackRock &amp; Larry Fink" width="696" height="392" src="https://www.youtube.com/embed/HEtAajItFDc?feature=oembed" frameborder="0" allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share" allowfullscreen></iframe></p> 
<h5><strong>Disclaimer</strong></h5> 
<p>The information discussed by Altcoin Buzz is not financial advice. This is for educational, entertainment, and informational purposes only. Any information or strategies are thoughts and opinions relevant to the accepted levels of risk tolerance of the writer/reviewers and their risk tolerance may be different than yours. We are not responsible for any losses that you may incur as a result of any investments directly or indirectly related to the information provided. Bitcoin and other cryptocurrencies are high-risk investments so please do your due diligence. Copyright Altcoin Buzz Pte Ltd.</p> 
<p>The post <a href="https://www.altcoinbuzz.io/cryptocurrency-news/security-agents-warn-of-a-risky-wordpress-crypto-plugin/">Security Agents Warn of a Risky WordPress Crypto Plugin</a> appeared first on <a href="https://www.altcoinbuzz.io">Altcoin Buzz</a>.</p>

Security Agents Warn of a Risky WordPress Crypto Plugin

Altcoin Buzz

Other articles published on Feb 9, 2024

This Major Crypto Exchange Just Received Approval to Operate in Netherlands

ERC-404 hybrid token standard gains traction amidst debate

Meme Coin Expert Zach Humphries Reviews New Token Emerging as the Next Big Solana-Based Meme Coin

Ripple vs SEC: Judge Approves Delay in Remedies-Related Discovery, XRP Surge to $0.52

Jupiter Price Prediction: Solana Token JUP Plunges 8% As Traders Turn To This New Green Crypto Fo...

Coinbase Suspends Trading of Status (SNT) to Maintain Compliance Standards

Join our free newsletter for daily crypto updates!