CybersecurityUpdated November 6

Installing WordPress’s fix can expose some sites to attack.

WordPress’s upgrade flaw is already being exploited. Umut Bayram of Picus Security, the researcher who found it, says some sites can still be attacked while installing the fix: the update unpacks its files using the site’s old, unpatched code, so an attacker who hits at the right moment can run code on the server. The fix is going in, but the old code is still in play.

1 publisher1 report

Coverage started November 6