Spyke

They recently claimed that a vulnerability in a WordPress plugin exposed WordPress users passwords. It didn't, only password hashes. That is significantly different.

WPScan also claimed that the vulnerability allowed "account takeover," despite that being unlikely to happen there.

View original on lemmy.world

Comments

wordpresssecurity·WordPress SecuritybyPluginVulnerabilities

Wordfence Claims It Is a Vulnerability For Users With the unfiltered_html Capability to Use Unfiltered HTML

https://www.pluginvulnerabilities.com/2024/02/05/wordfence-claims-its-is-a-vulnerability-for-users-with-the-unfiltered_html-capability-to-use-unfiltered-html/Open link View original on lemmy.world

Comments

wordpresssecurity·WordPress SecuritybyPluginVulnerabilities

WordPress Security Providers Falsely Claimed Cloudflare's Plugin Contained Vulnerability

https://www.pluginvulnerabilities.com/2024/02/05/wordpress-security-providers-falsely-claimed-cloudflares-plugin-contained-vulnerability/Open link View original on lemmy.world

Comments

wordpresssecurity·WordPress SecuritybyPluginVulnerabilities

Bug Introduced in WordPress 6.4.3 Highlights a Problem With Fixing Vulnerabilities That Are Not Really Vulnerabilities

https://www.pluginvulnerabilities.com/2024/02/02/bug-introduced-in-wordpress-6-4-3-highlights-a-problem-with-fixing-vulnerabilities-that-are-not-really-vulnerabilities/Open link View original on lemmy.world

Comments

wordpresssecurity·WordPress SecuritybyPluginVulnerabilities

Arbitrary File Upload Vulnerability in BERTHA AI

https://www.pluginvulnerabilities.com/2024/01/31/arbitrary-file-upload-vulnerability-in-bertha-ai/Open link View original on lemmy.world

Comments

wordpresssecurity·WordPress SecuritybyPluginVulnerabilities

Elementor is Still Providing Access to Security Nonces to WordPress Users Who Shouldn’t Have Them

https://www.pluginvulnerabilities.com/2024/01/30/elementor-is-still-providing-access-to-security-nonces-to-wordpress-users-who-shouldnt-have-them/Open link View original on lemmy.world

Comments

wordpresssecurity·WordPress SecuritybyPluginVulnerabilities

How To Secure a WordPress Plugin You Use

https://www.pluginvulnerabilities.com/2024/01/30/how-to-secure-a-wordpress-plugin-you-use/Open link View original on lemmy.world

Comments

wordpresssecurity·WordPress SecuritybyPluginVulnerabilities

Hacker Targeting Incompletely Fixed Vulnerability in 100,000+ Install WordPress Plugin Cookie Information

https://www.pluginvulnerabilities.com/2024/01/30/hacker-targetting-imporperly-fixed-vulnerability-in-100000-install-wordpress-plugin-cookie-information/Open link View original on lemmy.world

Comments

wordpresssecurity·WordPress SecuritybyPluginVulnerabilities

Cloudflare Only Added One Firewall Rule for a WordPress Plugin Vulnerability Last Year and It Was Eight Months Late

https://www.pluginvulnerabilities.com/2024/01/30/cloudflare-only-added-one-firewall-rule-for-a-wordpress-plugin-vulnerability-last-year-and-it-was-eight-months-late/Open link View original on lemmy.world

Comments

wordpresssecurity·WordPress SecuritybyPluginVulnerabilities

What to do If Someone is Claiming There is a Vulnerability in Your WordPress Plugin

https://www.pluginvulnerabilities.com/2024/01/29/what-to-do-if-someone-is-claiming-there-is-a-vulnerability-in-your-wordpress-plugin/Open link View original on lemmy.world

Comments

Posts