Archives

Securing Your WordPress Site: LiteSpeed’s LSWCP Vulnerability and Upgrade

Security
If you’re a WordPress user, and you use the LiteSpeed Cache plugin, please be aware that a vulnerability in the plugin, identified as CVE-2023-40000 poses a significant risk. The flaw allows unauthorized users to escalate their privileges and gain higher levels of access. A cyber security nightmare! Rest assured, WHC has swiftly updated to the latest, secure version of the LiteSpeed Cache for WordPress (LSCWP) plugin effectively patching the vulnerability, wherever we had access and permission.
LiteSpeed Cache for WordPress is a powerful plugin designed to accelerate websites performance and scalability. This tool boosts website speed and handles more visitors by reducing server load, ensuring pages load quickly for a smoother user experience.

Who is impacted?

This vulnerability affects WordPress installations that use LiteSpeed Cache for WordPress (LSCWP) with versions older than 5.7. The LiteSpeed Web Server itself is not affected by this vulnerability. The other cache plugins (Joomla, Laravel, OpenCart, Prestashop, etc.) are not reported to be affected by the present vulnerability.

What’s the vulnerability?

The LiteSpeed Cache vulnerability allows hackers to perform site-wide stored cross-site scripting (XSS) attacks. This enables attackers to inject malicious scripts, steal your data and potentially gain unauthorized access and control over your WordPress site if the vulnerability is not patched.

What we’ve done

  1. Updated LiteSpeed Cache for WordPress (LSCWP) Plugin: The WHC Team upgraded to the latest, secure version, eliminating the vulnerability for all eligible WordPress installations accessible via our automation tools. (Web hosting clients with active LSWCP plugin already enabled)
  2. Provide assistance for Cloud and Dedicated servers’ clients on cPanel who are using LiteSpeed Web Server. These clients should upgrade the LSWCP Plugin via the tool named LSCWP Version Manager inside their WHM interface. Contact support if you need help using the version manager tool.
  3. Continuous Monitoring: Our team continues to keep an eye on potential threats, ready to act.

Stay informed and secure

CVE-2023-40000 isn't the first vulnerability, and it won't be the last. In today’s online world, Cybersecurity is more important than ever. That’s why WHC stays proactive to keep your online presence secure and your information safe. Keeping you informed is important, as we value transparency. If you have any questions, our team is ready to answer them, 24/7. Thank you for placing your trust in us.

WHC ❤️ Devs – Empowering Canadian Developers at ConFoo

WHC News & Events

Last week, the Bonaventure Hotel in Montreal was the stage for ConFoo Montréal’s 22nd edition. This key conference in Quebec’s tech landscape is where local and international tech minds dive into everything Web Development, AI, and languages like PHP, Java, .Net, JavaScript, and Python. 

Our own Marian Marinov, Director of Engineering, was there and delivered an insightful talk on Microservices.

This year was WHC's first time sponsoring ConFoo, and we were in the middle of the action. The team connected with the vibrant crowd to chat, exchange ideas, and soak in knowledge. Oh, and the food at ConFoo? Absolutely delicious. 

Missed the event? Find out all about it below.

What’s ConFoo Montréal

ConFoo is a 3-day tech conference focused on new technologies and pragmatic solutions for web developers. The event takes place in Montreal since its debut, and WHC can attest to its success!

Its founder and maestro, Yann Larrivée, started ConFoo Montréal more than 20 years ago with the idea of multiplying knowledge by bringing web developers together to share their expertise and build connections. Veteran developers might remember it as the PHPQuébec meetup back in the day. 

The 2024 edition of ConFoo was from February 21-23 and hosted 155 presentations, a wide range of content, and an experience to remember. WHC witnessed first-hand that the formula works, sparking innovation and bringing devs and the tech community closer. 

WHC at ConFoo– You Code. We Host.

The WHC booth was buzzing! We chatted with developers who were excited to learn about a Canadian hosting option. Sharing stories and experiences, we realized just how much developers value a local web host that offers trusted and accessible solutions.

WHC at ConFoo

WHC’s Marian at ConFoo

Marian Marinov joined the WHC team in 2019. From day 1, he has leveraged his extensive tech background to lead our engineering efforts and build a better, safer infrastructure. 

Fueled by his passion for open source, Linux, and the color pink, Marian is a key player in the open source arena, organizing events like the OpenFest. 

In his first talk at ConFoo Montréal, Marian focused on "Microservices: Are they for me?", where he explained their benefits and challenges, helping attendees decide if microservices fit their project needs. 

Mariyan at ConFoo

WHC ❤️ Devs – Why Canadian Developers choose WHC

WHC supports developers as they build and scale their online projects, whatever the projects may be. Our web hosting plans come equipped with the tools and features that devs love the most–including Node.js, Python, PHP, MySQL, Git, SSH, and more. Most plans even include a free domain name. And the best part? All this… for less than the price of a poutine. 

Choosing WHC also means having the peace of mind of knowing your projects (and your data!) are hosted right here in Canada, and that our friendly tech support team is available 24/7, in English and French. WHC's commitment to local, trusted, and planet-friendly solutions is what truly sets us apart.

Wrapping It Up

Those 3 days at ConFoo Montréal were a wonderful opportunity for WHC to get out there, connect with incredible people, soak up knowledge from top experts, and share ours! And also reaffirm our commitment to growing the tech scene in Canada.

Huge shoutout to Yann Larrivée, and all the partners and volunteers for the fantastic organization. ConFoo Montréal rivals some of the world's biggest conventions!

WordPress vs Shopify

6 Reasons to choose WordPress over Shopify for your online store

Small Business Success, WordPress

Launching an online store has never been easier or more convenient! With platforms like Shopify and WordPress, starting a business or selling products online is now within everyone's reach.

While Shopify may be an ideal solution for some, at WHC we're big fans of WordPress and believe the future belongs to open source.

What exactly is Shopify?

Shopify is an e-commerce platform that stands out due to its all-in-one solution for creating an online store. Renowned for its ease of use, Shopify makes it straightforward for even the most novice users to manage their online business. Its user-friendly interface and streamlined inventory and order management have won the hearts of users worldwide. However, this simplicity comes with a relatively high monthly fee - $51 CAD for only the basic package - and very limited flexibility and customization.

What about WordPress?

WordPress, on the other hand, offers a virtually unlimited level of flexibility with its vast array of themes and plugins. It's an unrivaled CMS (content management system) for website creation, and its open source software also offers a complete solution for online businesses. Thanks to a wide range of features, WordPress is super adaptable to users’ needs: whether you want to create a showcase site, a blog, a portfolio or an online store, WordPress offers comprehensive options at a much lower price.

Here are the main reasons why so many Canadians choose WordPress to set up their business and sell online.

1. Unmatched flexibility and customization

WordPress, along with its WooCommerce plugin, offers almost unlimited flexibility and customization. Unlike Shopify, which is much more prescriptive, WordPress lets you create an online store that matches your vision exactly. This freedom to customize every aspect of your site is one of the main reasons why many people prefer WordPress.

2. Affordability

When launching a business or an online store, financial resources are often limited. WordPress stands out thanks to its many options and low cost. When it comes to Shopify, the basic package requires a substantial up-front investment of CA$51 per month. Not to mention the fact that Shopify may charge a transaction fee every time you make a sale, as well as charge for adding certain features.

With WordPress, there are obviously hosting and domain name fees, but they're much lower and you'll have control over these costs. Everything else, however, can be 100% free if your needs are basic and you're the least bit tech-savvy. You always have the option of investing in premium features, but in most cases, your online store won’t cost you more than a hundred dollars a year. What's more, WordPress offers unlimited scalability, adapting to the growth of your business with no hidden costs.

3. Site control

One of the major advantages of WordPress is the absolute control it gives users over both the site and its content. In the event of a hosting problem, simply contact the webhost to resolve the issue. You also have the final say on your site's performance and security solutions: you choose the options that really meet your needs.

Shopify, on the other hand, offers a turnkey solution and hosts everything on its own servers. This can be very beneficial in several ways, but also means that you lose control over a number of technical aspects. Obviously, the choice is based on individual preferences and needs in terms of site control and management.

4. Search engine optimization (SEO)

If you value search engine optimization (and you should!), WordPress may be for you, as it outperforms Shopify when it comes to SEO. Unlike Shopify, WordPress offers built-in features specifically designed to optimize content. A free tool like Yoast SEO will allow you to fine-tune every detail, in addition to giving you SEO performance scores and suggestions for improving content. What's more, you'll have full access to the source code, so you can optimize everything to your heart's content. Shopify, on the other hand, offers solutions that allow you to modify title tags, meta descriptions and so on.

5. WooCommerce: a must-have plug-in

If you choose WordPress as your e-commerce platform, you'll want to integrate the popular WooCommerce plugin into your site! Offering a free basic version, WooCommerce will make the process of creating your store a lot simpler. Although some premium features require an investment, you can design a very viable store using only the basic version.

How to start selling? Simply create product listings and link to a payment processing system like PayPal or Stripe, and you're ready to go! Then you can add a number of features to enhance the shopping experience. WooCommerce is flexible, scalable and easy to use.

6. A dynamic ecosystem

The rich WordPress ecosystem, which includes a vast community and some of the most active forums, also offers an inexhaustible reservoir of resources and plugins. Whether you're looking for advanced e-commerce functionality, social networking integrations or analytics tools, WordPress offers a solution thanks to its vast repertoire of plugins. This diversity contrasts sharply with Shopify, where options can sometimes seem limited, confining users to a rather rigid framework.

Why do some people choose Shopify?

If you're a novice WordPress user, you're bound to hit a few snags. Unlike Shopify, WordPress requires a steeper learning curve. Although WordPress is versatile and relatively easy to use once you get the hang of it, it is more complex than its competitor. Despite the array of external resources available free of charge, the lack of WordPress tech support can become frustrating. For those looking for the benefit of an all-in-one, integrated solution, and willing to pay for ease of use, Shopify is the more suitable option.

Launching my online store: where do I start?

As you can see, the choice of WordPress or Shopify will depend on your needs and comfort level. However, if customization and flexibility for your store are a priority, then WordPress, along with WooCommerce, is the ideal solution – one you certainly won't regret!

In short, WordPress is the Swiss army knife of the web!

If this article has cemented your decision to launch your store using WordPress, the next step is to choose a hosting plan and domain name. You can start creating your site and showcasing your products today!

Recent phishing attempts and how to avoid them

Security, WHC News & Events
At WHC, ensuring the safety and success of our clients online is paramount. We're addressing a recent security issue that could potentially impact you.

What’s the issue?

We've been made aware of phishing attempts targeting our customers through emails masquerading as official communication from WHC. As an example, some clients have reported receiving "Auto Renewal Failure" notifications from email addresses claiming to be affiliated with us. These emails are not from WHC, and we urge you to exercise caution. These messages aim to trick individuals into providing sensitive information, such as login credentials, by redirecting them to a fake website that looks very similar to ours.

Identifying phishing emails

Phishing email example Phishing emails often create a sense of urgency or fear, prompting immediate action. The goal is to trick recipients into providing sensitive information or clicking on malicious links. Here are a few red flags to watch for:
  • Suspicious links: Hover over any links in the email (without clicking!) to see if the URL directs you to our official website.
  • Unfamiliar sender: The email comes from an address that doesn't match our official domain (whc.ca).
  • Requests for personal information: We will never ask for your password or sensitive account information via email.
  • Spelling and grammar mistakes: Spelling errors can be a sign of phishing. To ensure that you are not accessing a phishing site, you can directly type the URL into your browser. For example:
    whc.ca is LEGIT
    clients.whc.ca is LEGIT
    clients-whc.ca is FRAUD
    billing-whc.ca is FRAUD

Immediate steps to take

  1. Enable Two-Factor Authentication (2FA): If you haven't already, we strongly encourage you to activate two-factor authentication on your account. This adds an extra layer of security, ensuring that you're the only person who can access your account, even if your password is compromised.
  2. Verify website authenticity: Before logging into your account, please double-check that you are on our official website, whc.ca. Look for the secure lock icon next to the URL and verify that the address is correct. This simple step can greatly reduce the risk of falling victim to phishing attempts.
Be aware that savvy attackers might also utilize SSL-secured websites. You can review the whc.ca website certificate to confirm that it is safe. Most browsers will display this information if you click on the padlock icon and follow the certificate details steps. Check that our name is displayed in the organization field.

How we're responding

  • Monitoring and response: Our security team is actively monitoring the situation to mitigate its impact and prevent its reoccurrence.
  • Support and assistance: Our bilingual tech support team is available 24/7 in English and French via chat, phone, or tickets to assist with any concerns or questions you may have regarding this issue.

What to do if you’ve been duped

Discovering that you've responded to a phishing attempt can be unsettling, but taking prompt, decisive action can help mitigate potential damage. Here's what you need to do immediately:
  • Change your passwords right away: Secure your accounts by updating your passwords. This includes your Client Area, email, WordPress logins, and any other services you use. Opt for strong, unique passwords that are not easily guessed.
    When resetting your passwords, always use the official password reset methods. Never click on any links received from an untrusted email.
  • Enable Two-Factor Authentication (2FA): If you haven’t already, enabling 2FA on your accounts provides an additional security layer, making unauthorized access significantly more difficult.
  • Check your account for malware or unknown content: Review your accounts for any unfamiliar activity or files that you did not upload. Phishing attacks sometimes involve uploading malware to compromised accounts. If you find anything suspicious, contact our support team immediately for assistance.
After completing the above guidelines, if you suspect that your website or organization is a victim of fraud, use the Canadian Competition Bureau reporting guide to file a report.

Take action

If you have received a suspicious email, please do not click on any links or provide any information. Instead, report it to our support team immediately. Additionally, we advise conducting a thorough review of your account for any unusual activity and updating your password regularly as a precaution.
Marketing Trends 2024

Marketing trends to watch for in 2024

Small Business Success

In an age where the web is evolving at lightning speed, 2024 promises to be the year when marketing reinvents itself through artificial intelligence, authenticity becomes an overriding concern, and taking care of one's community becomes a priority.

Here's what has the potential to move the marketing needle this year.

1. Artificial intelligence

Artificial intelligence will continue to surprise us in 2024! Its emergence, dominated by tools like ChatGPT in particular, will continue to transform many industries. Obviously, AI gives a competitive advantage to companies and entrepreneurs who adopt it. However, its integration requires a high degree of adaptability in working methods and processes. AI will continue to be used, not only for content creation, but also for product development, automation and innovation.

2. Authentic, ethical influencer marketing

Influencers will still be gaining ground in 2024. Yet this time, in a digital landscape where consumers are looking for authenticity, nano and micro-influencers especially will gain in popularity. As public trust in influencers grows, we could see more collaborative forms of influencer marketing, particularly through events or other means of gathering. Nor can we overlook the rise of User-Generated Content (UGC), which turns consumers into excellent brand ambassadors.

3. A people-first approach

Let's not forget that we're coming out of a pandemic! People are longing for real human connection. In this context, the human side of marketing becomes essential. Not only should interest in and exchange between individuals be at the forefront of any marketing strategy, but the emphasis should also be on face-to-face encounters, through networking activities, for example. Thus, building on pre-existing connections and community on social networks will become crucial. It will make more sense to optimize your customers' experience and engage your existing subscribers, rather than try to gain mass visibility.

4. Ever-trendy SEO

Did you think search engine optimization (SEO) had run out of steam? Think again! SEO is still very much trending today. However, it will need that extra jump, requiring a more global vision, beyond simple keyword research. The idea is to make websites optimized to further enhance the user experience, not least by optimizing voice search (and accessibility in general), which is increasingly gaining ground. An active presence on social networks also helps improve SEO.

5. Mobile marketing

Adapting content for mobile devices isn't an option anymore - it's become crucial. According to Similarweb (2023), 64.97% of web traffic originated on mobile devices, compared with 32.86% on desktops and 2.16% on tablets. Strategies based on usage, timing and targeted activities on mobile devices will be essential for reaching the right audience.

6. The metaverse

The intimidating and perhaps frightening metaverse will play an even bigger role in 2024. Augmented reality and the use of interactive content are already enhancing customer experience. Several American companies have moved in this direction, and this initiative is likely to bear fruit.

7. Content marketing

In terms of content marketing, video formats will continue to dominate. Podcasts and webinars are also increasingly present in the digital landscape. If you want to increase the reach of your publications, long-form content will be the preferred choice in 2024. Ephemeral content, on the other hand, will need to be thought through in such a way that it can be reused or adapted over time. This will greatly help content creators not run out of steam.

8. Marketing automation

Marketing automation is set to play a crucial role in 2024. The process optimizes many campaigns and tasks, reducing manual effort. This in turn allows companies to focus on what really matters: customer service or core business. Companies will be well advised to turn to automation, which personalizes messages, increases customer engagement with the brand, and potentially improves conversion rates. It also enables data collection that can later be used to improve overall customer experience.

9. Sustainability

In 2024, eco-friendly marketing will emerge as an unavoidable trend. As customers are increasingly sensitive to environmental issues, they will turn to brands committed to sustainable practices. How can you integrate sustainability into your marketing strategy? By creating sustainable products, eco-friendly packaging or awareness-raising campaigns. Even online, it's possible to offer sustainable products and services – which, by the way, is what we do at WHC through our green hosting.

Of course, sustainability cannot simply be a marketing angle. It has to be part of a company's core values. Remember: authenticity comes first!

10. Is social networking still a trend?

Yes, it will still be relevant, but don't put all your eggs in that basket. TikTok will still dominate in 2024, especially when it comes to gaining visibility. We’re a long way from the TikTok dances! LinkedIn, for its part, continues its transformation into a dynamic space, by accentuating its user-friendliness – a far cry from the corporate beige we once knew. Its community is becoming increasingly receptive to more personal content. The demand for authenticity can be seen in all nooks and corners of the web! Of course, effective community management will be essential to improving customer relations, whatever the platform.

Which trends will you follow?

Obviously, these are forecasts. Nothing is set in stone. The web evolves at lightning speed, and a new trend is always just around the corner!

However, by taking note of these trends, you may well succeed not only in achieving your objectives, but also in improving relations with your customers. That's what matters most in the end. And remember: authenticity is the most important thing in 2024, even behind the screen.

Of course, implementing these emerging trends will require a certain level of agility. Don't try to do it all at once. Test and adjust. That's how you'll understand what works best for your brand.