RandomStorm launches WordPress application scanner

RandomStorm has launched a free scanner for WordPress administrators to check their blog apps for vulnerabilities.

Developed by penetration tester Ryan Dewhurst for the security management and compliance vendor, it said that the WordPress Scanner software enables users to check for any plug-ins or vulnerabilities that could leave blogs and websites open to hackers.

Dewhurst said: “Sometimes it is not easy to spot when a blog has been compromised. Hackers use tactics such as inserting infected iFrames, which look like normal pictures on the web page, but which can be used to initiate drive-by downloads of malware to visitors' computers. This sort of activity can get your site blacklisted so it's important to scan for vulnerabilities and remove them.”

WordPress has been hit by two security incidents this year: firstly, with it being hit by a large distributed denial-of-service (DDoS) attack that left users locked out; and secondly, a month later its parent site was hacked that left code belonging to both the company and its partners exposed.

Andrew Mason, technical director at RandomStorm, said: “WordPress Scanner forms part of RandomStorm's overall service to help companies to close vulnerabilities in their web applications and improve security for their business and their customers.”

The WordPress Scanner is a black box tool developed using the Ruby programming language. It is available for free download from today.

This article originally appeared at scmagazineuk.com