Stay away from “WP file manager”

[ad_1]

I work for a hosting company.

The vast majority of hacks I’m seeing right now are from outdated “WP file manager” plugins.

As soon as that thing gets outdated someone figures out how to break it. And then they just start loading stuff… Because it’s a file manager.

In fact, as soon as a customer calls in about CPU overages or hosting resources being overused I look for malware. I usually find it.

And then the very next thing I look for is this plugin. wp-content/plugins/wp-file-manager

Sometimes they’ve been hacked before and they bought websites security and everything was fine but they didn’t uninstall this plugin and the malware came back.

If you need to use it fine whatever but uninstall it when you’re done. A lot of content and theme outsourced work will use it because they don’t have FTP credentials.

I’m not selling anything. I’m just sick of getting yelled at because people don’t know this. You should check right now.

And if you already have malware then you need to immediately uninstall WP file manager and pay for your site to get scrubbed. Your web developer can do it but if the malware is really good then it’ll repopulate almost out of nowhere. Website security can be purchase from lots and lots of places.

You have been warned. This is me trying to help.

[ad_2]