🔴 Critical: WordPress Issues Patch for Critical Flaw That Can Enable Code Execution on Some Servers
-
WordPress has patched a critical vulnerability in its core software that could allow an unauthenticated attacker to make a site load a PHP file from outside its theme directories. On certain server configurations, this flaw can be escalated further, enabling an attacker to execute arbitrary code on the affected site.
The fix was released on September 22 in WordPress 7.1.2, and patches were also backported to every branch the project still supports, going all the way back to 4.7. Site owners are being urged to update as soon as possible.
- Update to WordPress 7.1.2 or the latest patched release for your branch
- Apply updates to all supported versions back to 4.7
- Verify your site is running the latest core version after updating
Given the unauthenticated nature of the flaw and the potential for code execution depending on server setup, prioritizing this update is strongly recommended.
Source: The Hacker News
Has your organization already pushed the 7.1.2 update across all WordPress instances, or are you still working through legacy branches?
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login