Google Search Console fail over notifications for the WordPress updates

I have quite a lot of WordPress based websites which I run and maintain. One of these is this blog: www.SorinMustaca.com

All my WordPress websites are configured to autoupdate to the latest WordPress update. The same applies to their plugins and themes.

Google Search Console (GSC) is a tool I used to manage better the registration of my websites with the search engine and their advertising platform Adsense.

Yesterday evening I received a couple of emails, one for each of my websites registered with the GSC :

Here is the text:

Recommended WordPress update available for http://sorinmustaca.com/

To: Webmaster of http://sorinmustaca.com/,

Google has detected that your site is currently running WordPress 4.7.0 or 4.7.1, an older version of WordPress. Outdated or unpatched software can be vulnerable to hacking and malware exploits that harm potential visitors to your site. Therefore, we suggest you update the software on your site as soon as possible.

Following are one or more example URLs where we found pages that have outdated software. The list is not exhaustive.

http://www.sorinmustaca.com/set-up-an-ad-filter-with-privoxy-on-raspberry-pi-for-free/

Recommended Actions:

1 Update to the latest release of WordPress

Visit the WordPress site for instructions on how to download and install the latest release.
2 Check your site for hacked content

Because there was a vulnerability on your site, it’s possible that your site might have been compromised. We recommend you check your site for any suspicious activity. You can see if Google has detected any hacked content on your site in the Security Issues section of Search Console.
3 Stay up to date on new releases

Remember that older or unpatched software might be vulnerable to hacking or malware, so it’s important to install new software releases when they come out.

Need more help?

• Read more about outdated software and vulnerabilities in our Help Center.
• Check your site for hacked content using the Hacked Sites Troubleshooter.
• If your site was compromised, read our guide for hacked sites.
• Ask questions in our forum for more help – mention message type [WNC-641200].
Google Inc. 1600 Amphitheatre Parkway Mountain View, CA 94043 | Unsubscribe from this type of message
Add partners who should receive messages for this Search Console account.

 

There is only one major problem for GSC: My websites have been updated a week ago to WordPress 4.7.2.


And this is the email where I was informed about the update: Note the date 26.1.2017

 

Note that they write:

Google has detected that your site is currently running WordPress 4.7.0 or 4.7.1

I guess that Google parsed the website before the update and they sent the notification a week later, or they did a wrong comparison.


© Copyright 2017 Sorin Mustaca, All rights Reserved. Written For: Sorin Mustaca on Cybersecurity


Check www.endpoint-cybersecurity.com for seeing the consulting services we offer.

Visit www.itsecuritynews.info for latest security news in English
Besuchen Sie de.itsecuritynews.info für IT Sicherheits News auf Deutsch

Related Posts

Implementing secure over-the-air (OTA) updates in embedded devices

This is a follow up article related to Secure Booting and Secure Flashing. It is the 5th article related to Strengthening the Security of Embedded Devices Implementing secure over-the-air (OTA) updates in embedded devices requires careful consideration of various security aspects. Here are some key steps to implement secure OTA updates: 1. Secure Communication Channel […]

Why security recommendations often get ignored

I read very often about vulnerabilities and companies that got hacked. Many times, the reason for which they got hacked was because some recommendation issued by some smart people (read: security minded people) are ignored.   But why are they ignored? I found some articles where several explanations are given for what is called “information avoidance“. […]

CSMS – Cyber Security Management System: New Regulations coming from ISO 21434 and WP.29

A Cyber Security Management System (CSMS) is soon going to become mandatory for all vehicles manufacturers and suppliers. In the automotive industry, we are currently seeing that Cyber Security is already a critical success factor. Starting with July 2024, the type approval of vehicles will only be possible if a certified CSMS is available and […]