Replies: 0
I have a site running the free version of WordFence. I recently got a blocked attack notification from a foreign IP that said the following:
“Blocked for Kiwi Social Share <= 2.0.10 – Unauthenticated Read Any Option”
I don’t have this plugin, and I’m pretty sure I never tried to install it. I asked my hosting company if they could locate folders for it in my directory, but they were not able to. After doing more research, I see that this version of the plugin is easy to exploit. I also had two failed login attempts on my admin account with the correct username. I am confused as to why my hosting provider wouldn’t be able to locate these plugin folders but WordFence blocked an attack. Can you help point me in the right direction? I haven’t had this type of notification before.