Blogger vs WordPress Blog

This entry was posted in General Security, Research, Wordfence, WordPress Security on January 5, 2017 by Mark Maunder   44 Replies   Visited 6,130 times, 6128 visits today

This week we are introducing something new. At the beginning of each month we will be doing a monthly WordPress security report. We will look at the attack data for the previous month from the 1st to the end of the month and provide a report and analysis on the attack activity we have seen on WordPress websites.

This is the monthly WordPress attack report from December 1st, 2016 until December 31st, 2016.

Most Active IPs

In the table below we have listed the most active attack IPs for December 2016. Note that the 'Attacks' column is in millions and is the total of all attacks that originated from each IP. Further right in the table (you may have to scroll) we break out the attacks into 'brute force' attacks and 'complex' attacks.

Brute force attacks are login guessing attacks. What we refer to as 'complex' attacks are attacks that were blocked by a rule in the Wordfence firewall.

We have also included the netblock owner which is the organization, usually a company, that owns the block of IP addresses that the attack IP belongs to. You can Google the name of the owner for more information. A Google search for any of these IP addresses frequently shows reports of attacks.

The hostname included is the PTR record (reverse DNS record) that the IP address owner created for their IP, so this is not reliable data but we include it for interest. For example, we have seen PTR records that claim the IP is a Tor exit node, but it is clearly not based on traffic.

We also include the country and a country flag. To the far right of the report we show the date in December we started logging attacks and the date attacks stopped. For many of these IPs we logged attacks for the entire month. For some you can see there is a clearly defined attack 'window' where the IP started and stopped.

The data below is embedded using a service called Airtable. This is the first time we're trying Airtable, so please leave your feedback in the comments. You'll note that it is also exportable.

Ukraine still owns the top spot

As you can tell from the table above, the Ukraine absolutely dominates the report. We have a total of 13 out of 25 top IPs that are based in Ukraine. Attacks are originating from 4 Ukrainian netblock owners:

PE Tetyana Mysyk

Pp Sks-lugan

Kyivstar GSM

ISP Datasvit network

Surprisingly, France takes the number 2 spot for the most IPs in the top 25 list with a total of 7 attack IPs. Most of these originate from Iliad Enterprises. Iliad is a large organization with many subsidiaries and over 4000 employees. They tried to buy T-Mobile in the USA 2 years ago. The netblock for these IPs is registered to Iliad, but the attacks may originate from one of many subsidiaries of Iliad, like the ISP 'Free' in France.

Seychelles

The outlier on the map is an IP address "89.248.172.121" based in Seychelles, which is an island off the east coast of Africa. Seychelles has a population of just over 90,000 and is officially the smallest sovereign African nation.

We logged 2.2 million complex attacks originating in Seychelles. This is surprising because internet access to islands is generally expensive and slow. But Seychelles is doing their part to contribute to global attacks on WordPress publishers.

We tracked the attacks to what appears to be an audio-visual store in downtown Victoria in Seychelles, based on public whois information for this IP. The IP is not a known Tor exit node and it probably is not a VPN exit node because it is unlikely that Seychelles has their own VPN provider.

Based on usage patterns we are seeing available in public data (try a Google search), the IP appears to be the public IP for users of a local Seychelles ISP. The attacks are probably an individual based in Victoria, Seychelles, who is using the ISP.

Complex Attacks vs Brute Force Attacks

A brute force attack is a password guessing attack that is simplistic and has a low likelihood of success. At Wordfence we consider a 'complex' attack to be an attack that tries to exploit a vulnerability in WordPress or a WordPress plugin. If you are using Wordfence to protect your WordPress website, brute force attacks are blocked by our brute-force protection and complex attacks are blocked by the Wordfence firewall.

The top two IPs, one in Ukraine and one in Russia, are both using complex attacks to target WordPress websites. They are also launching far more attacks than the top brute force attacker. They launched 32 and 12 million attacks respectively, while the top brute force attacker only launched 6.3 million attacks.

However, if you look at the total attacks we saw for the top 25 IP addresses, we saw 63 million complex attacks and 67 million brute force attacks. The most active IPs are choosing to launch complex attacks that are blocked by the Wordfence firewall, but the most common attack type is brute force, or password guessing.

This makes sense because more sophisticated attackers will launch a high volume of attacks that will have a high success rate. They will therefore choose to launch complex attacks and a huge number of them. Less sophisticated attackers will launch brute force attacks but won't be able to deliver the same attack volume as the pros. So you should see a lot of lower volume IPs engaging in brute force attacks and a few high volume IPs engaging in complex attacks, and that's exactly what we are seeing.

What, no Tor?

Something that we noticed in this report that we did not include in the table is the number of Tor exit nodes in the top 25 attack IPs. There are none. In our full dataset, we can see a large number of Tor exit nodes. We identify them from a list of Tor exit nodes and in every single case, both complex and brute-force attacks originate from the exit node.

In the top 25 list, not a single IP is a Tor exit node. Tor exit nodes are probably used by several low volume attackers for a wide variety of attacks. Using Tor is anonymous, but slow. Tor introduces a lot of latency (delay) in web requests. When you decide to bulk hack millions of WordPress websites, you probably don't want the latency that comes with using Tor. You can learn more about Tor in our Learning Center.

Brute Force Attacks

If you recall our post on December 16th where we described a "Huge Increase in brute force attacks in December", we saw a marked increase in the number of attacked sites starting in late November. We also saw the number of attacks gradually increase above our 60 day average, peaking at just over 2o million attacks per day. And finally around the 16th of December was saw a dramatic spike in the number of attack IPs engaging in brute force attacks. Reference the original brute force post for those charts.

Now that we have the full data for December, you can see that this culminated in a huge increase in total attacks at the end of the month.

In late December we saw a massive spike in brute force attacks. The average for the month was 20 million attacks per day, and the total attacks we blocked spiked to over 45 million for a period of 48 hours.

As you can tell from our top 25 data, no single IP generated more than 6.3 million brute force attacks for the entire period. To add an additional 25 million attacks per day, over and above what we normally see, an attacker would have to compromise a large number of IP addresses and then launch attacks distributed across their new attack platform. The data from our mid-month report showed that large spike in new attack IPs.

The attack quickly died down and this may have been due to the noise the attacking IPs were generating. It would have been easy for hosting providers to detect outgoing malicious activity on their networks and shut down the servers that were launching these attacks.

Early this month we have seen brief spikes of similar activity that have lasted a few hours. We have not yet seen a multi-day effort like we saw in late December.

Complex Attacks

From December 15th to December 27th we saw a marked increase in complex attacks that were blocked by the Wordfence firewall. Attack volume did not quite double, as we saw in the brute force chart above.

The peak attack volume for complex attacks blocked by Wordfence was just over 8 million attacks per day. There is no strong correlation in the timing of complex attacks and brute force attacks or the duration. They appear to be disconnected.

Plugins seeing the most attacks

The table below shows which plugins were most targeted by attacks in December 2016. You should note that all of these are publicly known vulnerabilities that the plugin vendor is probably aware of and has fixed, although we have not verified this.

The list below is simply a list of what we are seeing attacked in the wild. It is not a list of "most vulnerable" plugins or a list of plugins that are currently vulnerable.

The "Plugin Slug" is the unique 'slug' used to identify the plugin to WordPress. It is easier for us to extract plugins by 'slug' from our attack data than get actual plugin names.

Each plugin has a link to a vulnerability report that is likely the vulnerability being exploited in each case. (Click the slug) We have also included the year the vulnerability was published next to the slug.

You'll notice that many of these are old vulnerabilities. Some of them date as far back as 2012. The reason we think these old vulnerabilities are being so widely exploited is because most attacks use free, off-the-shelf WordPress scan and exploit tools.

These tools come pre-loaded with a number of exploits that an inexperienced attacker can automatically launch at any WordPress website. This makes up the bulk of the attacks on WordPress plugins that we see. They have a low likelihood of success if you are keeping your WordPress installation up-to-date.

Rank Plugin Slug Attacks Blocked 1 google-mp3-audio-player (2014) 3,866,201 2 db-backup (2014) 3,607,072 3 wp-symposium (2015) 1,635,894 4 dzs-zoomsounds (2015) 1,617,512 5 really-simple-guest-post (2015) 1,230,015 6 wp-ecommerce-shop-styling (2015) 1,123,328 7 candidate-application-form (2015) 1,117,750 8 tinymce-thumbnail-gallery (2012) 1,043,966 9 pica-photo-gallery (2012) 1,023,009 10 plugin-newsletter (2012) 1,011,422 11 simple-download-button-shortcode (2012) 986,659 12 dukapress (2014) 946,831 13 wp-filemanager (2013) 909,217 14 jquery-html5-file-upload (2016) 883,365 15 recent-backups (2015) 847,996 16 simple-ads-manager (2015) 825,505 17 wpshop (2015) 775,787 18 aviary-image-editor-add-on-for-gravity-forms (2015) 774,018 19 acf-frontend-display (2015) 771,248 20 formcraft (2016) 764,899 21 work-the-flow-file-upload (2015) 757,809 22 woocommerce-product-options (2016) 757,531 23 wptf-image-gallery (2015) 752,382 24 inboundio-marketing (2015) 751,198 25 front-end-upload (2012) 745,027 Themes seeing the most attacks

The list below shows the slugs of themes that we saw most commonly targeted in December 2016. Once again, this is not a list of vulnerable themes or the 'most unsafe' themes. They are simply commonly targeted and most likely had vulnerabilities at some point that have now been fixed.

We've included the year each vulnerability that is being exploited was published and most of the slugs in the table have links to the exploit that is most likely being used.

As with the plugins, this list contains many old exploits, probably for the same reason. Most of the vulnerabilities in this list are "local file inclusion" vulnerabilities that allow an attacker to download wp-config.php or other sensitive files.

Rank Theme Slug Attacks 1 mTheme-Unus (2015) 3,485,508 2 churchope (2014) 3,399,433 3 lote27 (2014) 2,566,892 4 elegance (2014) 1,840,865 5 awake (2016) 1,838,267 6 infocus (2014) 1,830,555 7 echelon (2014) 1,386,527 8 dejavu (possibly 2014) 1,310,259 9 construct (unknown) 1,155,775 10 fusion (2015) 1,147,655 11 persuasion (2013) 1,128,816 12 method (unknown) 1,110,563 13 myriad (unknown) 1,099,149 14 infocus2 (2015) 1,096,006 15 parallelus-mingle (unknown) 1,084,646 16 trinity (2014) 1,083,314 17 urbancity (2014) 1,081,411 18 epic (2014) 1,078,927 19 parallelus-salutation (2015) 1,067,890 20 modular (unknown) 1,067,402 21 linenity (2014) 1,063,945 22 authentic (2014) 1,043,639 23 antioch (2014) 981,204 24 NativeChurch (2015) 891,350 25 estrutura-basica (2015) 451,997 Conclusion

That concludes our monthly attack report for December 2016. You are welcome to download the top 25 list of IP addresses and perform your own analysis. The Airtable embed includes an option for a CSV download.

We welcome to share your own findings in the comments and any questions you might have.

Mark Maunder – Wordfence Founder/CEO.

Did you enjoy this post? Share it!

4.64 (28 votes) Your rating:

Source: The December 2016 WordPress Attack Activity Report

FREE DOWNLOAD: 21 Must-Have Online Business Tools

As an entrepreneur, blogger or freelancer, sometimes you are so eager to grow quickly, especially in the early years, that you tend to invest in too many online marketing tools, software and gadgets.

Worst yet, it's easy to get confused and you end up investing in the wrong tools altogether!

Today I am cleaning up the confusion. I've drilled down on my top recommended tools and resources for starting and running your online business.

Here's what you really need to move your business forward, even when you've got a tight budget! 

TRAFFIC BUILDING TOOLS

All-In-One SEO – "The most popular plugin for managing WordPress SEO and Open Graph social meta"

By far the most effective SEO tool in WordPress history, All in One SEO Pack Pro optimizes your WordPress website or blog for search engines and social media networks. All in One SEO Pack Pro is always one major version ahead of the free plugin which means it includes the latest features.

The Pro version includes various other functionality and modules such as advanced WooCommerce support, a Video SEO module (including Video XML Sitemaps), SEO for categories, tags, and custom taxonomies.

Ninja Outreach – "An all purpose influencer marketing tool"

This tool saved me a ton of time! The first time I used it, it was for a blog post that ended up getting input from almost 300 bloggers. The post got shared over 1,300 times and it was the first post on a new website with no email list. NinjaOutreach streamlined the process that helped me form hundreds of relationships with bloggers in my space.

If you're looking to save time, I highly recommend giving this a try. 

SEM Rush – "Benefit from your competitors!"

Launch global campaigns for your website and get all the necessary metrics regarding its competitors, keyword rankings, and on-page health from one place. Get insights into your competitors' strategies in display advertising, organic and paid search, and link building. Cross, combine, and visualize SEMrush data to compare competitive domains and estimate keyword difficulty with a few clicks.

EMAIL MARKETING & LIST BUILDING

Drip – "The best marketing automation platform, hands down"

If you don't already have one, you need an email service provider. This must-have tool allows you to communicate directly with your growing audience and develop relationships with your target market. There are a ton of email service providers out there, so I don't want you to get stuck in the weeds trying to research them all. Drip is an all-around good pick that will grow with you. I love their segmenting and funnel building capabilities the most! With Drip, you can start simple (for just $1!) and move into setting up more sophisticated funnels down the road.

LeadPages – "Get more leads and customers"

LeadPages is my go-to to solution for creating opt-in pages that grow my email list every single day. In fact, I use it to set up opt-ins for all of the freebies on this site. My favorite thing about LeadPages is their drag and drop templates. These make it easy to put together high-converting, designer-approved pages on the fly.

ConvertKit – "Email marketing for professional bloggers"

ConvertKit is my number one recommendation for email list management and building. ConvertKit makes managing your email list and setting up autoresponders so easy and user-friendly. Segmenting my email subscribers into groups so that they get content specific to their individual needs has never been more simple.

Wishpond – "Marketing tools designed to quickly and easily scale a business. No coding required."

This all-in-one marketing automation platform includes not only landing pages without need for coding, but it also has built-in email marketing automation and a host of assets you can use to build your email list in minutes.

OptinMonster – Lead Generation Software That Drives Huge Results, FAST!

This pop-up tool (plus more) converts website visitors into subscribers and customers.  You can create various types of lead generation forms such as lightbox popups, floating bars, slide-ins, and more.

Aweber – "All the tools you need to send emails the right way."

Email is perfect for keeping your brand top of mind and staying connected with those who make a purchase, read your blog or meet you in person. And when you join the community where email automation began, you get access to all features and a team that's 100% devoted to your success.

WEBSITE DESIGN & DEVELOPMENT

Studiopress – "THE INDUSTRY STANDARD FOR Premium WordPress Themes & Plugins"

As you may already know, one of the most flexible, powerful, and smart ways to publish content online is by using WordPress software. Nearly 200k customers trust StudioPress themes for WordPress to bring their content to the world. The main reasons? Built-in SEO, unrivaled site speed, mobile responsive themes, and flexible code…among MANY other advantages.

DIY Themes – "The Ultimate Design and Template Manager for WordPress"

Whether you're running a business website or a personal blog, Thesis is a perfect choice because it enables you to do what other WordPress themes can't. For the first time, you can control every last detail of your site and design with three revolutionary features you won't find in any other WordPress theme: Boxes, Skins and Site Tools.

Weebly – Websites, eCommerce & Marketing in one place. So you can focus on what you love.

Tell your story with a beautiful website, online store or blog. With Weebly's drag and drop website builder, integrated eCommerce platform and responsive themes you can build a professional website without any technical experience.

WishList Member – Unzip, upload, and within minutes you'll have your own membership site!

This online business tool is a powerful, yet easy to use membership software solution that can turn any WordPress site into a full-blown membership site. Just unzip and upload the plugin, and within minutes you'll have your own membership site up and running… complete with protected, members-only content, integrated payments, member management, and so much more!

Optimizepress – Marketing Site Creation, Made Easy…

What Can You Create With OptimizePress? Now you can create almost any kind of pages for your business inside WordPress Edit your pages with our 100% Live editor – meaning you see the changes you make to your content and layout live on the page.  No need to refresh, preview or reload… OptimizePress comes in WordPress Theme & Plugin formats, so is fully integrated with the WordPress CMS.  You can use the plugin version of OP with any other theme if you want to keep your main blog design.

 

CONVERSION TOOLS

Center – "Your marketing command center"

It sees what your customers are doing in ALL of your sales and marketing apps… and Automates Across All of Them! Studies have found that an average of 68% of e-commerce transactions are abandoned before they're completed. With Center, you can automatically send a reminder email to anyone who didn't complete their order. People are highly engaged with your product just after purchase, so it's an ideal time to present any upsell offers that could enhance their experience. You can add targeted upsell offers to your onboarding sequence with a simple rule in Center.

SamCart – "Pick a gorgeous template and start selling!"

I finally decided to try SamCart after dozens of my friends and peers in online marketing had huge success using the checkout page platform. So, I guess I shouldn't have been shocked that my sales increased almost instantly when I made the switch. Not to mention, I saved thousands of dollars in development fees.

Still, my favorite thing about SamCart is that it seamlessly integrates with all of my other tools. This allows me to launch my courses faster, with the confidence that all the pieces of my funnel will play nicely together.

Deadline Funnel – This will help you "sell more in less time."

Use: This will create deadlines for your leads and make them want to "take action now." It will help you increase your conversion rates and it can integrate with most email providers and web platforms.

DOMAINS & WEB HOSTING TOOLS

NameCheap – "Register Your Domains from $0.88"

You'll need a domain name if you don't have one already. Search for the one you want and purchase it at the click of a button, or transfer your domain to the most cost-effective provider on the web.

WP Engine – "THE WORLD'S MOST POWERFUL MANAGED WORDPRESS HOSTING"

Speed up WordPress with this hosting provider's baked in CDN, super fast servers and amazing up-time. WP Engine provides best-in-class customer service on top of innovation-driven technology. This is why over50,000 customers in 120 countries have chosen them for their mission critical WordPress hosting needs.

WireNine – Secure & reliable hosting optimized for fast page load times with CDN, SSL and DDoS protection!

WireNine has been providing reliable web hosting services for over 12 years to customers in over 65 countries. Our award winning hosting services combined with 24/7 friendly US-based support are the perfect platform for any kind of website – from small to medium sized wordpress blogs to large e-commerce based online stores, rest assured you're in good hands.

Bluehost – The Best Web Hosting Starting at $7.99 $3.95/month*

All of my niche websites are hosted on Bluehost. Why? Because they make it incredibly easy to get a new site up and running with their one-click automatic WordPress Blog installation. Even Unfunnel.com started on Bluehost's easy-to-use and extremely affordable hosting platform. You can use your Bluehost account to host multiple domains so there's no need to pay more for hosting when you're ready to start another website. Also, they provide outstanding customer service!

I highly recommend using Bluehost for your first website, and you can get started now at only $2.75/month, which is an exclusive Unfunnel Growth Labs member deal!

NOTE: I currently use or have used all of the resources on this page and I HIGHLY recommend all of them. Many of these links are affiliate links, which means I may get a commission if you purchase. However, none of the fees of these resources have been increased to compensate me.

FREE DOWNLOAD: 21 Must-Have Online Business Tools 

Grab The FREE Guide »

Related

Source: 21 Must-Have Tools For Online Business Building in 2017

Hey guys, thanks for replying. I followed the steps to delete the blog and now no longer have access to it in my account, but it appears to still be active. I'm not sure if this is a delay from wordpress or google, but I assumed that it would be gone by now.

I'm not sure there's any way to contact wordpress directly and request it be taken down. I have tried the google removal, but because it's a blog I don't think google can do anything without approval from the host.

Source: Deleted old blog - still showing up in google search

Howdy there! If you have been around WordPress circles for a while, you must have come across phrases such as WordPress theme frameworks and child themes. If you're a newbie, you will come across said phrases in no time whatsoever. Lucky for thee, we are lifting the veil of mystery shrouding WordPress frameworks and WordPress child themes. More precisely, we are looking into the Genesis Framework and a couple of Genesis child themes for your pleasure.

Here's how we are breaking down this piece:

What is a WordPress Theme Framework?

What is a WordPress Child Theme?

Top 10 Amazing Genesis Child Themes

By the end of this post, you will have juicy details on WordPress theme frameworks and child themes. You will also have all the child themes you need to turn the Genesis Framework whichever way you desire. Without further ado, let's dive in.

What is a WordPress Theme Framework?

So, what is this animal we are calling a WordPress theme framework? Why do you need a WordPress theme framework? Well, let's begin with first things first.

You can think of a WordPress theme framework simply as a code library that facilitates development of a theme. Still vague an answer I know, but allow me to explain. A theme framework is a set of standards, functions and features that help you to create your own theme.

In other words, a theme framework offers you the base code you need to start developing your own theme. Instead of building themes from scratch all times, you get a head start using a theme framework. Instead of adding feature after feature from scratch, you get starter features and design elements that make your work a lot easier.

You can build a million and one different themes using a single framework, adding different features to each as you go. A WordPress theme framework is basically the foundation of a WordPress theme. According to Charlie Livingston of Athemes:

Typically, {a} framework will contain the core code, covering the basic features and design elements. The framework is then used as a starting point when a new theme is created. New features and design elements are added to the framework to create the finished product.

That sums it up I guess.

What is a WordPress Child Theme?

But then, what are WordPress child themes in relation to WordPress theme frameworks? Seeing as a theme framework is the foundation, a child theme is any theme that borrows functionality from said framework. Just like a house has a foundation from where it finds strength, child themes find base on a framework.

A framework provides the functionality, and a child theme provides the stylistic touch. This way, you can build many designs from a single framework. If you need to update the base code in the framework, your styles are preserved.

Say, for example, you're using the Genesis Framework. Themes that borrow features and functions from this framework are known as Genesis child themes. Another point to note is Genesis child themes won't work without the Genesis Framework. First, you must install the framework before using any of the Genesis child themes we outline here.

In the general sense of the term though, a WordPress child theme is:

A theme that inherits the functionality and styling of another theme, called the parent theme. Child themes are the recommended way of modifying an existing theme. – WordPress Codex

To learn more, feel free to check out our detailed post on how to create WordPress child themes.

Genesis Framework Features & Pricing

The Genesis Framework is a product by StudioPress, a renowned brand in the WordPress community. The StudioPress trademark is owned by Rainmaker Digital, LLC., the same guys who brought you Copyblogger, yet another renowned name in WordPress circles.

Genesis is probably the most popular WordPress theme framework in this era. It boasts of a huge fanbase (164k+ customers) and over 80 child themes. It's parked to the brim with the best of features and options to get keep your creative juices flowing.

At a glance, the Genesis theme framework ships with the best of features such as:

A theme customizer that's a bliss to work with. It allows you to tweak everything from colors to theme settings and much more in real time

Featured content widgets for all of your awesome content

Customizable headers because who can get enough of these?

Premade page templates

A million and one theme options

A fully responsive and mobile-ready framework

SEO ready

Plentiful of layout options

Top of the range security

Unlimited support and updates

Et cetera

Really, the list of Genesis' features is extensive. And for a tiny price of just $59.95 bucks, you could have the agility of a framework like no other powering your site. Add $40 bucks to that and you can walk away with a child theme of your choice.

There's a Pro Plus package going for $347 bucks that gets you the Genesis Framework, detailed theme tutorials and all StudioPress themes among other goodies. That out of the way, let us look at the top Genesis child themes at your disposal.

Top 10 Amazing Genesis Child Themes

Now that you can tell what theme frameworks and child themes are, here are the best Genesis child themes in the market. All Genesis child themes on this list are responsive and affordable, and most come with the framework.

Parallax

The best of parallax and plenty of white space come together in this affair to create one of the best Genesis child themes you will ever come across. Parallax Pro is the perfect Genesis child theme for agencies and freelancers looking to build portfolio websites.

It ships with the best of features including a fully responsive design, 5 color styles, custom backgrounds, parallax scrolling, HTML5 markup, footer widgets, custom headers, a landing page, and multiple theme options among others.

Remobile

If you're looking to invest in Genesis child themes, this is one theme that needs a place in your WordPress professional toolkit. Remobile offers you the perfect template for your next blog or business website. It's beautiful, responsive and lets you leverage your "…expertise in typeface, design, and support so you can spend more time serving your audience."

You get plenty of theme options, layouts, custom backgrounds and headers, and homepage widget areas among others.

Daily Dish

Daily Dish is a clean and lightweight Genesis child theme that is great for magazines and news sites. But seeing Genesis framework is fully customizable, you can bend Daily Dish to run whichever site you have in mind.

It is one of those Genesis child themes that focuses attention on the most important part of your website; the content. It makes the content appealing and palatable. With multiple widget areas, you can place your content wherever, and since this bad boy is responsive, your users will have a great time regardless of their devices.

6 page layouts and plenty of theme options make Daily Dish a darling of many a WordPress user.

Foodie

As a nutritionist or food blogger, you need a WordPress theme that helps you to get your message across in the easiest and most impactful way possible. Of all Genesis child themes we cover here today, Foodie is a true winner in terms of functionality and style.

Foodie features a clean and minimalist design, multiple color schemes, a responsive and mobile friendly design, multiple page templates, featured images and all the goodies that ship with the Genesis Framework.

Smart Passive Income

If you would like to create smart passive income streams, you need advice from guys such as Pat Flynn. I say this because Pat regularly clocks more than $100k bucks per month from his blogs. His largest blog, Smart Passive Income runs on the Smart Passive Income child theme.

And according to StudioPress:

Pat Flynn knows it takes three key elements to create a successful online platform: design, content, and strategy. The Smart Passive Income Pro theme weaves together these essential elements. It features striking design and strategic content areas that will make your online business unforgettable.

They are not lying; Smart Passive Income child theme is the real deal.

Author

We all have dreams, and one of mine is to publish a best seller, make it big and live in a wooden cabin somewhere far away from civilization. That, or travel the world over. When I finally overcome whatever is holding me back, I know I will need a website that lets me showcase my best works in style. But, sadly, this post is not about my dreams.

If you are an author already making waves in your own small way, we present you the Author child theme. It's one of those Genesis child themes made specifically for you and only you as an author. Theme features an intuitive design that draws attention to your books, and superior functionality makes managing your work incredibly easy.

Education

Learning institutions, too, have a thing for the Genesis Framework. If you run an online course, you need to convey all your awesome content in a short period and with the most impact. You need a no-nonsense child theme such as Education Pro; a theme that helps students and faculty get to the information they need in a timely manner.

Education child theme ships with 6 layouts, plenty of theme options, 6 color styles, featured images, custom backgrounds, a responsive design, custom menus and so much more. It's exactly the theme you need to give your education site a new lease of life.

Glam

Let us help you sell more of your products with one among the most alluring Genesis child themes – Glam. It's adorable, and ships with the best of the Genesis Framework, taking you closer to your readers.

You won't struggle to showcase your products, what with amazing categorization features, homepage widgets, a responsive design, multiple color styles, a number of page templates, customizable headers, featured images and HTML5 markup among others.

Infinity

There is a world of possibilities out there for the dreamer. Build any number of WordPress sites with Infinity, a theme that give most Genesis child themes a run for their money. It's built beautiful and powerful to impress, the one characteristic you need to convert readers to loyal buyers.

Full with an intuitive shop, you will run your ecommerce store like a boss with Infinity. Plenty of sections make it easy to present your best information. This child theme ships with multiple page templates, a range of layouts, custom headers, WooCommerce support, and a responsive design among others.

Jessica

If you're building an ecommerce site, you needn't look further than Jessica. Brought to you by Web Savvy Marketing, Jessica is full of all the features that make it incredibly easy to sell your products. You can use WooCommerce, Ithemes Exchange or WP-eCommerce plugin to set up your store, and jazz things up with multiple color styles, custom headers, homepage widgets and so much more.

Other features include featured products, sale products, custom reviews, coupons, social media integration and newsletter subscriptions among others.

Over To You…

If you love the Genesis Framework, you will obviously appreciate a good list of Genesis child themes. The child themes outlined here make it easy to build any website upon a framework like no other. However, this list is in no way conclusive; use it as a road map while on the hunt for the best Genesis child themes.

Did we miss your favorite Genesis child themes? Feel free to share in the comments below to keep this list growing. Cheers!

Source: 10 Amazing Genesis WordPress Child Themes

Introduction

Sadly, wordpress.com changed some of the backend features and designs to the worse, but you probably noticed it. Fortunately, there are still workarounds to restore the old editor and to get one of the previous stats pages back. But now you might have noticed that they removed the 48 hours graph in the top bar, to be more exact, they moved it into one of the menus in the new dashboard. If you are like me, and if you want to restore the previous position of the 48 hour spark line, you are in luck… Our friend tPenguinLTG helped us out again and wrote another script, this time a script that will restore the stats graph in the admin bar!

How To Restore The 48 Hours Graph

1. If you previously went through every step of the classic editor script tutorial or the classic stats page tutorial, you should be well prepared for the next steps and you can skip the first step entirely. If not, now is the time to take a look what kind of browser you use. If you don't know it, there is a site that shows you the browser name. If your browser is Mozilla Firefox or Google Chrome, you're good to go, otherwise I can't suggest this often enough, install one of both because they are far better than any other browser. If you decided for Firefox, install the extension Greasemonkey, if you have Chrome installed then install Tampermonkey. The browser extensions with the funny monkey name do allow us to run user scripts that we need to customize our blogging experience.

2. Now we need to install the 48h stats graph script, so that our browser and the funny monkey extension can load it. If you didn't find it, there is a green button on the page with the label "Install this script". Just click on the button and you should be asked if you really want to install the script, where you have to agree so that the script can be installed. Are we done yet? We will find out in the next step!

3. The last step totally depends on whether our blog has the ".wordpress.com" ending or your own domain name. If your blog has the ".wordpress.com", you're already done and the script should work now! If you have your own domain, there is still something we need to do now. We need to add our domain in the script options. Since the way to the script option is slightly different depending on whether you use Firefox with Greasemonkey or Chrome with Tampermonkey, I will explain it separately for both cases…

If you use Chrome and Tampermonkey: Look for the symbol in the top area of Chrome that looks like a black square with round corners and two eyes. This is your Tampermonkey symbol, click on it to open the menu. One of the entries in the menu should be a green symbol with tools and the label "Dashboard". If you click on this entry, you should now get to a page where all your installed scripts are listed. Click on the "WordPress.com Stats Sparkline" script and then on "Settings". Take a look at the area called "Includes/Excludes", you should find a box with the headline "User includes". Click on the "Add…" button and add your domain name in the following format:

https://changetoyourdomain/*

. The asterisk sign at the end is needed so that the script runs on all sub pages!

If you use Firefox and Greasemonkey: Look for the monkey symbol in the top area of Firefox. This is your Greasemonkey symbol, click on it to open the menu. There should be one entry called "Manage user scripts…", click on it. You should now see the "WordPress.com Stats Sparkline" script in the list, click the settings button beside it. Now you should have a window open where you see a list box called "Included Pages…" where you just have to click on "Add…". Here you have to add your domain name in the following format:

https://changetoyourdomain.com/*

The asterisk sign at the end is needed so that the script runs on all sub pages!

Last Words

You restored the 48 hours graph. The graph should now be visible again in the top WordPress bar if you are logged into your site. If you have the classic redirect script installed too, it should even redirect you to the classic stats page if you click on the graph. You might also want to take a look at the classic blog editor script if you haven't already. I am glad if you want to thank me for this guide, but most of the applause should go to tPenguinLTG who wrote the 48h stats bar script and the scripts mentioned in my other WordPress usability guides.

Greetings. My name is Dennis. My native language is German and I do write in English about various subjects and my interests, especially to improve myself but also to share some experiences or to write down some thoughts. My interests are photography, graphic design, music-making, animals, nature, technology, games, lifestyle and more. I just want to document my experiences and some stories of life. I'm glad to meet new people from all around the world. View all posts by Dennis

Source: How To Restore The WordPress 48 Hours Stats Graph