Still Hack Attacks Vis Sp Page Builder
Matthias Heymann
During the last days, we encounter hack attacks on this file: /index.php?option=com_sppagebuilder&task=asset.uploadCustomIcon
So far, our htaccess blocked it, but maybe you have a look at possible security holes here.
Matthias Heymann
Accepted AnswerI had updated already to 6.6.2.before these attempts. Good to know, that this problem was fixed already.
Pascal - HTProtect.org
Accepted AnswerThey keep trying, but these requests won't achieve anything. As long as your site is up to date, you can safely ignore them.
Rashida Rahman
Accepted AnswerHi there!
Thanks for reaching out.
The asset.uploadCustomIcon endpoint has been secured in the latest SP Page Builder v6.6.2.
If you've already updated to SP Page Builder 6.6.2, performed a thorough security check of your website, and ensured your site is protected with appropriate security measures, you can safely ignore these blocked requests. They are most likely automated attempts to exploit known vulnerabilities on publicly accessible websites.
If you haven't updated yet, we strongly recommend upgrading to SP Page Builder 6.6.2 as soon as possible and taking a full backup before performing the update.
Best regards,
Paul Frankowski
Accepted Answerread also my short today anwser here: https://www.joomshaper.com/forum/question/45599