WordPress Issues Patch for Critical Flaw That Can Enable Code Execution on Some Servers

WordPress has fixed a critical flaw in its core software that lets an attacker with no account make a site load a PHP file from outside its theme folders.

On some servers, that can go further, allowing the attacker to run their own code. The fix shipped on September 22 in WordPress 7.1.2, with fixes for every branch the project still supports, back to 4.7, and WordPress is telling site owners

Source: The Hacker News

Leave a Reply

Your email address will not be published. Required fields are marked *

Explore More

Google Adds Selfie Video Recovery for Users Locked Out of Their Accounts

Google Adds Selfie Video Recovery for Users Locked Out of Their Accounts Google on Thursday announced a new way for users to sign-in to their accounts by letting them take

LearnVector – Andrew Ng’s AI company building one‑to‑one learning experiences

LearnVector – Andrew Ng’s AI company building one‑to‑one learning experiences Source: Hacker News

New MODBEACON RAT Uses gRPC Streaming for Encrypted C2 Traffic

New MODBEACON RAT Uses gRPC Streaming for Encrypted C2 Traffic The China-linked cybercrime group known as Silver Fox has been attributed to a new Rust-based remote access trojan (RAR) called