Cybersecurity threats are constantly evolving. Recently, a new vulnerability (CVE-2025-5392) was identified in the GB Forms DB plugin for WordPress, posing significant risks to websites and servers. This vulnerability has the potential for remote code execution (RCE), enabling attackers to exploit Linux servers easily. Summary of the Incident The CVE-2025-5392 vulnerability affects all versions of […]

The recent discovery of CVE-2025-5058 highlights a vulnerable point within the eMagicOne Store Manager for WooCommerce plugin. This vulnerability allows unauthorized attackers to upload malicious files due to insufficient file validation. This is especially concerning for Linux server environments and hosting providers that support WordPress plugins. Incident Overview The vulnerability stems from the missing file […]

Cybersecurity threats are constantly evolving. Recently, a new vulnerability (CVE-2025-5392) was identified in the GB Forms DB plugin for WordPress, posing significant risks to websites and servers. This vulnerability has the potential for remote code execution (RCE), enabling attackers to exploit Linux servers easily. Summary of the Incident The CVE-2025-5392 vulnerability affects all versions of […]

The recent discovery of CVE-2025-5058 highlights a vulnerable point within the eMagicOne Store Manager for WooCommerce plugin. This vulnerability allows unauthorized attackers to upload malicious files due to insufficient file validation. This is especially concerning for Linux server environments and hosting providers that support WordPress plugins. Incident Overview The vulnerability stems from the missing file […]

A critical vulnerability was found in Contact Form 7. The WordPress utility is activated on more than 5 million websites, and 70% of these are running the unprotected 5.3.1 version or older. The vulnerability allows attackers to bypass Contact Form 7’s filename sanitization and upload a file that can be executed as a script file on the host server.

BitNinja has become a finalist this week in the international Cloud Computing Awards program, The Cloud Awards. Since 2011, The Cloud Awards has sought to promote and celebrate excellence and innovation in cloud computing. Entries are throughout the globe and across multiple industry sectors. Categories for the 2020-21 Cloud Awards include “Cloud Project of the […]

The Business Intelligence Group announced that they had awarded BitNinja Technologies the 2020 Stratus Award for Cloud Computing in the security category.  “BitNinja is at the forefront of the cloud helping to drive practical innovations in the cloud,” said Maria Jimenez, Chief Nominations Officer of Business Intelligence Group. “The cloud is now part of the […]

Researchers have found a vulnerability in cPanel and WHM. With a zero-day attack that is a brute force, hackers can easily bypass the 2-Factor Authentication (2FA). The SEC-575 vulnerability allowed attackers to try limitless 2FA codes until finding the right one and gain access to the account. Usually, brute force attacks take more hours or […]

Renowned hacker Kevin Mitnick hacked into San Diego’s Supercomputer Center to access the device of Tsutomu Shimomura. Interestingly, Shimomura was a computer researcher who was on a mission to track down and capture Mitnick! So, when did this happen? And why was his guard down? Because it was Christmas and Black Friday! The above example […]

BitNinja received the Business Intelligence Group’s BIG Award for Business and was named 2020 Small Business of the Year. The BIG’s annual programme rewards companies, products, and people that are leading their respective industries.  “It’s a great honor to be named as a winner of the BIG Award. This trophy shows us that hard work, […]

Have you ever wondered what BitNinja can do if an account on your server has been stolen or someone gets access via a hacked SSH?  Perhaps some customers store their passwords on a sticky note, or, for example, an account has been purchased to gain access to the server to infect it with malware uploads. […]

After last year’s €500,000 seed investment, BitNinja has raised $2.5 million in Series A funding, led by Lead Ventures. Our history BitNinja was founded in 2014 and became very profitable by the following year. In December, 2015 we were one of the eight selected start-ups in Cyber London’s second accelerator programme. In November, 2019 we […]

On 2 September 2020 arstechnica reported a zero-day vulnerability in a WordPress plugin. File Manager helps users manage their files on the website. It was downloaded 700,000 times and more than half of the customers are affected. The vulnerability allowed hackers to execute commands and upload files on a website. How did the BitNinja team patch the vulnerability? We discovered the exploit with our Defense Robot. […]

The cybersecurity landscape is evolving constantly. Recently, a serious vulnerability was detected in the WP Email Debug plugin for WordPress. This plugin opened doors for privilege escalation and unauthorized access, making it imperative for system administrators and hosting providers to take action. Incident Overview The vulnerability, identified as CVE-2025-5486, stems from a missing capability check […]

As a server administrator or hosting provider, you're constantly facing various cybersecurity threats. A recent vulnerability discovered in the WP-Recall plugin for WordPress poses significant risks, particularly related to SQL Injection attacks. Overview of the Vulnerability The CVE-2025-1323 vulnerability allows unauthenticated attackers to exploit the WP-Recall plugin through a SQL Injection vector. This vulnerability originates […]

The BitNinja 3.12.7 release introduces refinements across multiple modules to enhance consistency, compliance, and compatibility. Key improvements include adopting PSR-4 compliance standards in various components, better handling of Nginx configurations within the ConfigParser module, and more. These updates help maintain code reliability and improve interaction with complex server environments. BitNinja 3.12.7 Multi-Module Refactoring for PSR-4 […]