Alarming WordPress Security Vulnerabilities

beNi released 3 alarming vulnerabilities in the popular WordPress blog platform

  1. Cross Site Scripting – it didn’t work for me
  2. Forced Redirect – it worked for me
  3. Directory Traversal – n /a

Due to the really huge install base, I really hope that the folks at wordpress.org issue a patch quickly to address these vulnerabilities. Update : It sems that the site hosting the proof of concept exploits is down for maintenance.(thanks leion)



Thank you for reading this post. You can now Read Comment (1) or Leave A Trackback. Print This Post Print This Post

Post Info

This entry was posted on Sunday, February 11th, 2007 .

Tagged with:

You can follow any responses to this entry through the Comments Feed. You can Leave A Comment, or A Trackback.



Previous Post: »
Next Post: »

Read More

Related Reading:

Latest Posts:

One Response to “Alarming WordPress Security Vulnerabilities”


Subscribe without commenting


Leave a Reply

Note: Any comments are permitted only because the site owner is letting you post, and any comments will be removed for any reason at the absolute discretion of the site owner.

CommentLuv Enabled