WordPress 7.1.3 Fixes Pending Comment XSS and a WXR Export SQL Injection
WordPress 7.1.3 includes 7 security fixes and 4 bug fixes, including a stored XSS via pending comments and a second order SQL…
Browse
Security
-
Read more: WordPress 7.1.3 Fixes Pending Comment XSS and a WXR Export SQL Injection
-
WordPress 7.1.2 Patches an Unauthenticated Template Vulnerability
Read more: WordPress 7.1.2 Patches an Unauthenticated Template VulnerabilityWordPress 7.1.2 fixes a critical, unauthenticated template resolution vulnerability that can lead to remote code execution on any affected public site.
-
WordPress 7.1.1 Fixes Comment XSS Plus 36 Core and Editor Bugs
Read more: WordPress 7.1.1 Fixes Comment XSS Plus 36 Core and Editor BugsWordPress 7.1.1 includes 11 security fixes, among them a stored XSS through comments in wpautop(), and 36 bug fixes across core and…
-
WordPress 7.0.4 Fixes an Imagick and Ghostscript Code Execution Risk
Read more: WordPress 7.0.4 Fixes an Imagick and Ghostscript Code Execution RiskWordPress 7.0.4 fixes an author level remote code execution issue on sites whose servers use Imagick and Ghostscript to process images and…
-
WordPress 7.0.3 Fixes a Login Screen XSS and 11 More Security Issues
Read more: WordPress 7.0.3 Fixes a Login Screen XSS and 11 More Security IssuesWordPress 7.0.3 fixes 12 security issues, including a login screen XSS reachable without an account and a multisite privilege escalation.
-
WordPress 7.0.2 Closes a SQL Injection and a REST API Code Execution Flaw
Read more: WordPress 7.0.2 Closes a SQL Injection and a REST API Code Execution FlawWordPress 7.0.2 fixes a facilitated SQL injection and a REST API batch route flaw leading to remote code execution, with forced auto…
-
WordPress 6.9.4 Completes the PclZip, Notes and getID3 Security Fixes
Read more: WordPress 6.9.4 Completes the PclZip, Notes and getID3 Security FixesWordPress 6.9.4 completes the PclZip, Notes and getID3 security fixes that were not fully applied in 6.9.2, so every site should end…
-
WordPress 6.9.2 Patches 10 Security Issues Including SSRF and XSS
Read more: WordPress 6.9.2 Patches 10 Security Issues Including SSRF and XSSWordPress 6.9.2 is a security release that fixes 10 issues, several involving logged in roles, the media library and admin screens.
-
HIPAA Compliant WordPress Hosting for Healthcare Websites
Read more: HIPAA Compliant WordPress Hosting for Healthcare WebsitesWhat healthcare organizations need to know about HIPAA compliant WordPress hosting: where PHI appears, forms, encryption, access control, logging and BAAs.
-
WordPress Security Hardening: The Checklist We Apply to Every Site
Read more: WordPress Security Hardening: The Checklist We Apply to Every SiteThe WordPress security hardening steps AlphaWeb applies to every site: updates, accounts, two factor, file permissions, WAF, backups, logging and incident response.