Connect with us

WORDPRESS

WordPress Security Plugin Exposes +1 Million Websites

Published

on

Main Article Image - WordPress Security Plugin Exposes +1 Million Websites

The WPS Hide Login WordPress plugin recently patched a vulnerability that exposes users secret login page. The vulnerability allows a malicious hacker to defeat the purpose of the plugin (of hiding the login page), which can exposes the site to an attack for unlocking the password and login.

Essentially, the vulnerability completely defeats the intended purpose of the plugin itself, which is to hide the WordPress login page.

WPS Hide Login

The WPS Hide Login security plugin defeats hacker attempts to gain access to a WordPress site by hiding the administrator login page and making the wp-admin directory inaccessible.

WPS Hide Login is used by over one million websites to add a deeper layer of security.

Defeating hackers and hacker bots that attack the default login page of a WordPress site doesn’t actually need a plugin. An easier way to accomplish the same thing is to install WordPress into a directory folder with a random name.

What happens is that the login page hacker bots will seek out the normal login page but it doesn’t exist at the expected URL location.

Advertisement

Instead of existing at /wp-login.php the login page is effectively hidden at /random-file-name/wp-login.php.

Login bots always assume that the WordPress login page is at the default location, so they never go looking for it at a different location.

The WPS Hide Login WordPress plugin is useful for sites that have already installed WordPress in the root, i.e. example.com/.

Report of Vulnerability

The vulnerability was publicly reported on the plugin’s support page.

A user of the plugin reported that if the main home page was redirected then adding a specific file name to the URL that redirects will expose the URL of the hidden login page.

This is how they explained it:

Advertisement

“For example with the following domain: sub.domain.com if domain.com redirects to sub.domain.com there is the following bypass:

Entering the URL domain.com and add /wp-admin/options.php then it redirects to sub.domain.com/changedloginurl and you see the login-url and could log in.”

Security Site Published a Proof of Concept

WPScan, a WordPress security organization published a proof of concept. A proof of concept is an explanation that shows that a vulnerability is real.

The security researchers published:

“The plugin has a bug which allows to get the secret login page by setting a random referer string and making a request to /wp-admin/options.php as an unauthenticated user.
Proof of Concept

curl –referer “something” -sIXGET https://example.com/wp-admin/options.php
HTTP/2 302 ”

The United States government National Vulnerability Database rated the vulnerability as a high level exploit, giving it a score of 7.5 on a scale of 1 to 10, with a score of 10 representing the highest threat level.

Advertisement

WPS Hide Login Vulnerability Patched

The publishers of the WPS Hide Login plugin updated the plugin by patching the vulnerability.

The patch is contained in version 1.9.1.

According to the WPS Login Changelog:

“1.9.1
Fix : by-pass security issue allowing an unauthenticated user to get login page by setting a random referer string via curl request.

page by setting a random referer string via curl request.”

Users of the affected plugin may wish to consider updating to the latest version, 1.9.1, in order to effectively hide their login page.

Citations

US Government National Vulnerability Database

CVE-2021-24917 Detail

Advertisement

WPScan Report of WPS Hide Login Vulnerability

WPS Hide Login < 1.9.1 – Protection Bypass with Referer-Header

Plugin Report of Vulnerability

Bypass-SECURITY ISSUE!!!

Official Plugin Changelog

WPS Hide Login Changelog

Searchenginejournal.com

Keep an eye on what we are doing
Be the first to get latest updates and exclusive content straight to your email inbox.
We promise not to spam you. You can unsubscribe at any time.
Invalid email address

WORDPRESS

How to Make $5000 of Passive Income Every Month in WordPress

Published

on

By

How to Make $5000 of Passive Income Every Month in WordPress

Are you looking for a low-maintenance side gig to generate some extra income? Selling digital downloads might be the answer.

I’ve been personally selling digital downloads for over a decade. It’s a painless way to make money because you don’t have all the overhead of selling physical goods, and you can set up an online store with little effort using a free WordPress plugin.

Let me share my experiences with you and tell you how you can make $5000 of passive income per month selling digital downloads on WordPress.

Note: Keep in mind that running an online business takes time and requires your constant attention. Selling digital downloads, however, is as close to passive as it gets.

This is a guest post by Chris Klosowski, the president of Easy Digital Downloads, the best digital eCommerce plugin for WordPress. This is an expert column that we publish every Thursday, where we invite a WordPress expert to share their experiences with our readers.

Advertisement
How to Make K of Passive Income Every Month in WordPress

Why Digital Downloads Are a Great Way to Make Passive Income

You’ve heard the expression, ‘No pain, no gain.’ This means that achieving something worthwhile normally requires sacrifice and hard work.

But what if I told you that you can make money with your WordPress website while you sleep?

That’s passive income.

Passive income is money that you earn with little to no ongoing effort. Think of earning interest on your savings account or renting out a spare room.

Or selling digital downloads.

Compared with selling physical products, digital downloads are a breeze. There’s no need to keep track of inventory, no running out of stock, no need to hire storage space or workers to manage it, and no shipping and handling.

Like everything, it requires a little setup. You’ll have to create or obtain the files you want to sell. And you’ll need to set up a WordPress website and install an eCommerce plugin.

Advertisement

Easy Digital Downloads (EDD) is one example of a plugin designed specifically for digital downloads. It lets you get started for free, and you can purchase extensions to add the features you need as you grow.

Once your online store is set up, you can continue to sell your digital product over and over again. So, the money you make will require very little ongoing effort.

You can even use automation to save time and effort and make the income truly passive.

How Much Passive Income Can You Earn With Digital Downloads?

The amount of money you can make by selling digital downloads varies a lot, depending on your skills, experience, and the type of digital products you are selling.

When starting out, it’s typical for beginners to make just a few hundred dollars a month in initial sales.

That being said, in time, it’s not uncommon for established sellers with a loyal audience to achieve $5,000 or more per month.

Advertisement

For example, Emily McDermott tells the story of how she made a promising $700 in her first month of selling attractive business documents. After just three months, she was making over $7,000 a month. Plus, she spends just a couple of hours a week working on her online store.

The potential doesn’t stop there. Top earners make tens of thousands of dollars each month. But this is rare and will take more effort.

This extra work may take it out of the ‘passive’ income category. But with that sort of revenue, you’ll probably want to spend more time working on your online store anyway.

A number of our Easy Digital Downloads customers have achieved this. For example, Set Sail Studios has made $236,000+ selling fonts, and Escape Room Geeks has made $390,000+ selling printable escape room kits.

Set Sail Studios Make Money Selling Unique FontsSet Sail Studios Make Money Selling Unique Fonts

Are you interested in making this kind of passive income? Your first step is to decide on a digital product to sell.

The Best Types of Digital Products for Passive Income

The best digital products for creating passive income have a high perceived value but require little ongoing maintenance. They should generate a profit and line up with your business niche.

Potential customers will only buy your digital download if it solves a problem or meets a need. A unique product in a specific niche will help you stand out and attract an engaged audience.

Advertisement

To create passive income, you need to choose digital products that don’t require ongoing effort.

For example, software products like WordPress plugins and themes can be quite profitable, but they often require continuing development and support. That takes an ongoing investment in time, so they are not the best options for a side gig that makes passive income.

On the other hand, a simple software program or web application that solves a common problem may be perfect. The EDD Software Licensing add-on can be used to activate the buyer’s copy of the software without your direct involvement.

eBooks are another profitable option. If your blog contains a lot of useful information, then you can easily repurpose the content as an eBook. You could create multiple books by choosing blog posts on specific topics, such as your most engaging and popular posts in specific categories.

Editing or Duplicating Posts in MPL-PublisherEditing or Duplicating Posts in MPL-Publisher

Alternatively, you may be able to repurpose the content as an online course and sell ongoing subscriptions to access the material. This offers more value than eBooks but also takes more time to set up. I will talk more about subscriptions later.

Perhaps you gained a lot of insights when you set up your business and are passionate about helping others do the same. You could sell an eBook about the key steps to creating a successful business or offer useful business documents and Excel templates.

Just make sure you choose a product you have expertise in. For example, Sam Parrett from Set Sail Studios creates and sells unique brush fonts, and this aligns well with his graphic design website.

Advertisement

Photographers could create a stock photo library, and designers could sell digital art products, printables, or Canva templates.

Add canva pageAdd canva page

The types of digital products that can generate passive income are endless. For inspiration, you can read about the pros and cons of many categories in this post on the most popular digital products to sell on the EDD blog.

How to Reduce Your Workload With Automation

When making passive income, you’ll want to be as hands-off as possible. In my experience, the best way to do this is to use automation to work smarter, not harder.

Luckily, you can get your website to perform many routine tasks automatically using automation.

These include email marketing, social media, customer service, admin tasks, and more. It’s simply a matter of choosing the right automation tools and setting them up correctly.

If you are using Easy Digital Downloads, then the software will automatically email purchase receipts and order confirmations to your customers. You can even personalize your automated eCommerce emails, leading to increased customer engagement.

1713560172 783 How to Make 5000 of Passive Income Every Month in1713560172 783 How to Make 5000 of Passive Income Every Month in

Using some extra tools, you can also automate your email marketing. This means that instead of writing emails manually one by one, you write them just once and set up triggers based on user activity to personalize the emails and send them automatically.

Personalized emails based on user activity are 320% more effective than generic emails.

Advertisement

You can set up the triggers using the FunnelKit Automations plugin for WordPress and send out the emails using a top email marketing service like Constant Contact.

Email automation typeEmail automation type

Additionally, you can use automation to reduce cart abandonment. By offering incentives and reminding visitors about their forgotten purchases, you will be able to build customer loyalty and encourage future purchases that contribute to your passive income stream.

For example, OptinMonster‘s exit-intent technology will watch the user’s mouse to determine when they are about to leave your website. It can then automatically display a popup just in time, offering an incentive to complete the visitor’s purchase.

1713560172 271 How to Make 5000 of Passive Income Every Month in1713560172 271 How to Make 5000 of Passive Income Every Month in

There are plenty of other automated workflows you can use while selling digital downloads. To learn about the best automation tools, see how to use eCommerce automation to save time and money.

Marketing Strategies to Boost Your Passive Income

I mentioned earlier that you can get started selling digital downloads by using the free version of Easy Digital Downloads. Let me introduce you to some paid marketing tools and add-ons that can help you make even more passive income.

In my last guest post, I talked about how order bumps are one of the best ways to encourage customers to spend more money on digital downloads. This is when you offer the buyer extra or upgraded products during checkout.

This is a great strategy when you are selling multiple digital products. You can automatically add order bumps with the EDD cross-sell and upsell add-on to boost your sales.

For example, if you sell music downloads and a customer purchases a song, you can offer them the option of purchasing the entire album while checking out. They may appreciate the suggestion and make the larger purchase.

Advertisement
Upselling Digital Products With an EDD Add-onUpselling Digital Products With an EDD Add-on

Alternatively, if you are selling your digital products through WooCommerce, then you can see this tutorial on how to create an order bump for WooCommerce.

Another strategy is to turn a one-off payment into ongoing income by offering subscriptions or recurring payments.

This is a good strategy when you are selling online training or access to cloud-based software. Subscriptions allow your customers to avoid a large initial bill and bring in ongoing revenue to your business.

Subscriptions are easy to set up with the EDD recurring payments add-on. And because it’s an automated system, you will get fewer late or missing payments.

I hope these tips help you make passive income from your WordPress website. You may also want to see these guides on the right way to create an email newsletter and the best AI chatbots for your website.

If you liked this article, then please subscribe to our YouTube Channel for WordPress video tutorials. You can also find us on Twitter and Facebook.



Source link

Advertisement
Keep an eye on what we are doing
Be the first to get latest updates and exclusive content straight to your email inbox.
We promise not to spam you. You can unsubscribe at any time.
Invalid email address
Continue Reading

WORDPRESS

10 Amazing WordPress Design Resouces – WordPress.com News

Published

on

By

10 Amazing WordPress Design Resouces – WordPress.com News

Whether you’re a design pro or a total newbie, you’ll find a great tool in this list that will take your website skills to the next level.

Designing a beautiful website from scratch can be difficult for developers of all skill levels. Luckily, in today’s Build and Beyond video, Jamie Marsland reveals his ten favorite WordPress design tools and websites to elevate your next build.

Get inspiration for your next website’s design and then start building with WordPress.com. Ready to get going? Click below to embark on your free trial today:

Here are the sites and resources mentioned in the video:

1713497163 978 10 Amazing WordPress Design Resouces – WordPresscom News

Heikei

Stunning backgrounds and visuals

1713497163 497 10 Amazing WordPress Design Resouces – WordPresscom News
1713497163 315 10 Amazing WordPress Design Resouces – WordPresscom News
1713497163 599 10 Amazing WordPress Design Resouces – WordPresscom News
1713497163 270 10 Amazing WordPress Design Resouces – WordPresscom News

Shots

Easy mockups for products and thumbnails

1713497163 518 10 Amazing WordPress Design Resouces – WordPresscom News
1713497163 631 10 Amazing WordPress Design Resouces – WordPresscom News

Coolors

Generate color palettes with a click

1713497163 689 10 Amazing WordPress Design Resouces – WordPresscom News
1713497163 719 10 Amazing WordPress Design Resouces – WordPresscom News
10 Amazing WordPress Design Resouces – WordPresscom News

Join 110.1M other subscribers

Advertisement

Source link

Keep an eye on what we are doing
Be the first to get latest updates and exclusive content straight to your email inbox.
We promise not to spam you. You can unsubscribe at any time.
Invalid email address
Continue Reading

WORDPRESS

[GET] The7 Website And Ecommerce Builder For WordPress

Published

on

By

The7 website and ecommerce builder for wordpress is the most customizable WordPress, Elementor, and WooCommerce theme available on the market up to …

Source link

Keep an eye on what we are doing
Be the first to get latest updates and exclusive content straight to your email inbox.
We promise not to spam you. You can unsubscribe at any time.
Invalid email address
Continue Reading

Trending

Follow by Email
RSS