Joomla! Kunena Vulnerability Fixed on all SiteGround Servers

blog

Critical vulnerability in the famous Kunena forum component for Joomla! were announced three days ago and a new version of the component that addresses the issue was released. According to the official Kunena blog post all extension that are not updated to the latest version are vulnerable and the attackers may use XSS and SQL injection to gain full access to a Joomla! site.

Continue reading “Joomla! Kunena Vulnerability Fixed on all SiteGround Servers”

Two-factor authentication now available for your SiteGround account!

twofactor

If you have gone through the anguish of having your personal information exposed to theft and abuse, you probably already realize that even the best password is not always enough to protect your data against unauthorized access. There are many ways how you can find yourself exposed: lost/stolen electronic devices, electronic fraud (phishing, scam, etc.), and hacking of popular service providers have all become widespread. Continue reading “Two-factor authentication now available for your SiteGround account!”

TimThumb Critical Vulnerability Fixed on SiteGround Servers

header

Another serious security issue was reported earlier today within one of the popular WordPress plugins for managing thumbnails – TimThumb. This plugin already has a history of causing security issues in the past with which we dealt with. The current vulnerability allows the attacker to gain unauthorised access to your hosting account and even execute shell commands on it. Needless to say, this is not something we can allow to happen.

Our security team has reacted immediatelly after the vulnerability was disclosed. We have applied a patch in our in-house system to protect all our customers from getting hacked through TimThumb. Currently, if you’re hosted on SiteGround, you will be protected against hacking attempts that try to utilise this problem.

However, we strongly recommend that you switch plugins or update TimThumb as soon as new version is released.

[subscribe_cta]

SiteGround SMS Notifications now Help you Sleep Better!

sms

It is very stressful to receive a call while on a vacation by a customer, asking if you have any idea why his site is down. It is even more unpleasant to realize that the reason is something so simple, as a failed renewal, or something else, that you could have easily prevented, if you knew about it on time. To minimize the chance for such situations we have launched a brand new SMS notification system.

Continue reading “SiteGround SMS Notifications now Help you Sleep Better!”

Our Affiliates’ Verdict: Quality Matters!

new4-new

When we launched our new affiliate program almost 2 years ago we aimed to increase the number of people who recommend us by providing very competitive payout terms. However, we did not want to diminish the importance of our service quality and our goal was to keep it the number one reason for people to endorse us. The ever growing numbers of affiliate sales over the last 2 years showed that we were on the right track in attracting more affiliates, but we were not so sure about their motivation to join the program and recommend us. That, combined with our wish to gather more information about who our affiliates are, how they rate the different aspects of the program, and what we can do to make things better for them, made us conduct a survey among our affiliates and the results are summarized below. Continue reading “Our Affiliates’ Verdict: Quality Matters!”

Hangout About the New Joomla and WordPress Toolkits – Full Record and Answers

As promised, we’re adding the full recording of the hangout we had on Tuesday on our new Joomla and WordPress toolkits. We’d like to thank all of you who joined us live! We have received some questions regarding the tool after the hangout ended, so we’re going to answer them in this blog post.

Continue reading “Hangout About the New Joomla and WordPress Toolkits – Full Record and Answers”

Jetpack Critical Vulnerability Fixed on SiteGround Servers

jetpack

Yesterday, on April 10th, a critical security flaw in the popular Jetpack plugin was made public in an official statement by the Jetpack developers. If the vulnerability was exploited, an attacker could publish new posts in any WordPress installation using Jetpack and possibly get even more access to that site. Although we did not detect any hacked sites through that exploit on our servers, that was a critical security hole and we took several actions to patch it.

Continue reading “Jetpack Critical Vulnerability Fixed on SiteGround Servers”

SSL HeartBleed Vulnerability Patched

heartbleed1

As some of you already know, a major vulnerability in some versions of the OpenSSL software libraries was announced two days ago. It got the fancy name “HeartBleed” and in short, allows anyone on the Internet to read the server memory protected by the vulnerable versions of the OpenSSL software and hijack your SSL’s private key. The interesting information is that not all old versions of the software are affected and there are some older and some newer ones that have it.
Continue reading “SSL HeartBleed Vulnerability Patched”