WordPress – Website Builder: credential exposure in Stealer Logs
An overview of indexed Stealer Logs entries associated with the Android application WordPress – Website Builder.
org.wordpress.androidCatalog updated · UTCWhat do these figures mean?
These entries reference the Android package of WordPress – Website Builder in Stealer Logs collected from compromised devices. Their presence does not establish a breach of the application or its publisher.
Counts represent indexed entries, not unique accounts or people. Multiple entries may refer to the same account; they do not establish whether credentials remain valid.
Dates describe indexation in LeakRadar, not when a device was infected or an account was compromised. The seven-day figure counts entries added during that period. The catalog refreshes hourly.
Protect the affected accounts
If an account associated with WordPress – Website Builder is exposed, address the device and the account together.
Check the device first
Remove malware and update the system. Use a trusted device to change credentials.
Replace exposed passwords
Use a unique password for every account, including accounts that reused the exposed password.
Review access and enable MFA
Revoke active sessions, review recovery settings and enable multifactor authentication where available.
Investigate the exposure of WordPress – Website Builder
Continue in the member area with the exact package org.wordpress.android. An account is required to access search results.