{"id":2358,"date":"2015-03-05T16:06:06","date_gmt":"2015-03-05T23:06:06","guid":{"rendered":"http:\/\/www.whitefirdesign.com\/blog\/?p=2358"},"modified":"2015-03-11T11:52:43","modified_gmt":"2015-03-11T17:52:43","slug":"mojo-marketplace-sells-wordpress-security-service-while-using-insecure-wordpress-version","status":"publish","type":"post","link":"https:\/\/www.whitefirdesign.com\/blog\/2015\/03\/05\/mojo-marketplace-sells-wordpress-security-service-while-using-insecure-wordpress-version\/","title":{"rendered":"MOJO Marketplace Sells WordPress Security Service While Using Insecure WordPress Version"},"content":{"rendered":"<p>In a previous post we looked at the fact that <a title=\"MOJO Marketplace Distributing Software With Known Security Vulnerabilities\" href=\"http:\/\/www.whitefirdesign.com\/blog\/2015\/03\/05\/mojo-marketplace-distributing-software-with-known-security-vulnerabilities\/\">MOJO Marketplace distributes outdated software with known security vulnerabilities<\/a>. Their lack of concern for security doesn&#8217;t end there; they have not kept their WordPress installation up to date:<\/p>\n<p><a href=\"https:\/\/chrome.google.com\/webstore\/detail\/wordpress-version-check\/hbeikkjblcogpkdnchpffgefhkilodnn\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-2351\" src=\"https:\/\/www.whitefirdesign.com\/blog\/wp-content\/uploads\/2015\/03\/mojo-marketplace-wordpress-version.png\" alt=\"The MOJO Marketplace blog is running WordPress 4.0\" width=\"500\" height=\"150\" srcset=\"https:\/\/www.whitefirdesign.com\/blog\/wp-content\/uploads\/2015\/03\/mojo-marketplace-wordpress-version.png 500w, https:\/\/www.whitefirdesign.com\/blog\/wp-content\/uploads\/2015\/03\/mojo-marketplace-wordpress-version-300x90.png 300w\" sizes=\"auto, (max-width: 500px) 85vw, 500px\" \/><\/a><\/p>\n<p>&nbsp;<\/p>\n<p>If they actually used their own service they could be up to date, because unlike other software they offer they actually provide\u00a0the latest version of WordPress:<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-2362\" src=\"https:\/\/www.whitefirdesign.com\/blog\/wp-content\/uploads\/2015\/03\/mojo-marketplace-wordpress-version-distributed.png\" alt=\"MOJO Marketplace is providing WordPress 4.1.1\" width=\"500\" height=\"150\" srcset=\"https:\/\/www.whitefirdesign.com\/blog\/wp-content\/uploads\/2015\/03\/mojo-marketplace-wordpress-version-distributed.png 500w, https:\/\/www.whitefirdesign.com\/blog\/wp-content\/uploads\/2015\/03\/mojo-marketplace-wordpress-version-distributed-300x90.png 300w\" sizes=\"auto, (max-width: 500px) 85vw, 500px\" \/><\/p>\n<p>Not only have they not updated to the latest major release of WordPress, 4.1, they haven&#8217;t applied the &#8220;<strong>critical security release&#8221;<\/strong> for <a href=\"https:\/\/wordpress.org\/news\/2014\/11\/wordpress-4-0-1\/\">4.0 that was released on November 20<\/a>. That\u00a0would have normally have happened automatically, so either they disabled automatic updates, which is\u00a0bad\u00a0idea if you are not going to be on top of updating WordPress, or they have some problem blocking that from happening. If there was a problem and they actually cared about WordPress security getting to the bottom problem would have been the right thing to do as it could possible help others as well. Their lack of concern for the security of WordPress on their own website hasn&#8217;t stopped them from feeling it is appropriate for them to\u00a0<a href=\"https:\/\/www.mojomarketplace.com\/item\/make-my-wordpress-site-secure\">sell\u00a0a\u00a0WordPress security service<\/a>\u00a0to others though.<\/p>\n<p>If you are looking to improve the security of your WordPress website you should check out our\u00a0free <a href=\"https:\/\/wordpress.org\/plugins\/plugin-vulnerabilities\/\">Plugin Vulnerabilities plugin<\/a>, which warns if you are using WordPress plugins with known security vulnerabilities.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>In a previous post we looked at the fact that MOJO Marketplace distributes outdated software with known security vulnerabilities. Their lack of concern for security doesn&#8217;t end there; they have not kept their WordPress installation up to date: &nbsp; If they actually used their own service they could be up to date, because unlike other &hellip; <a href=\"https:\/\/www.whitefirdesign.com\/blog\/2015\/03\/05\/mojo-marketplace-sells-wordpress-security-service-while-using-insecure-wordpress-version\/\" class=\"more-link\">Continue reading<span class=\"screen-reader-text\"> &#8220;MOJO Marketplace Sells WordPress Security Service While Using Insecure WordPress Version&#8221;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[25,3],"tags":[41],"class_list":["post-2358","post","type-post","status-publish","format-standard","hentry","category-bad-security","category-wordpress","tag-mojo-marketplace"],"_links":{"self":[{"href":"https:\/\/www.whitefirdesign.com\/blog\/wp-json\/wp\/v2\/posts\/2358","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.whitefirdesign.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.whitefirdesign.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.whitefirdesign.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.whitefirdesign.com\/blog\/wp-json\/wp\/v2\/comments?post=2358"}],"version-history":[{"count":5,"href":"https:\/\/www.whitefirdesign.com\/blog\/wp-json\/wp\/v2\/posts\/2358\/revisions"}],"predecessor-version":[{"id":2365,"href":"https:\/\/www.whitefirdesign.com\/blog\/wp-json\/wp\/v2\/posts\/2358\/revisions\/2365"}],"wp:attachment":[{"href":"https:\/\/www.whitefirdesign.com\/blog\/wp-json\/wp\/v2\/media?parent=2358"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.whitefirdesign.com\/blog\/wp-json\/wp\/v2\/categories?post=2358"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.whitefirdesign.com\/blog\/wp-json\/wp\/v2\/tags?post=2358"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}