Alarming WordPress Security Vulnerabilities

beNi released 3 alarming vulnerabilities in the popular WordPress blog platform

  1. Cross Site Scripting – it didn’t work for me
  2. Forced Redirect – it worked for me
  3. Directory Traversal – n /a

Due to the really huge install base, I really hope that the folks at wordpress.org issue a patch quickly to address these vulnerabilities. Update : It sems that the site hosting the proof of concept exploits is down for maintenance.(thanks leion)



Thank you for reading this post. You can now Read Comment (1) or Leave A Trackback. Print This Post Print This Post

Post Info

This entry was posted on Sunday, February 11th, 2007 .

Tagged with:

You can follow any responses to this entry through the Comments Feed. You can Leave A Comment, or A Trackback.



Previous Post: »
Next Post: »

Read More

Related Reading:

Latest Posts:

One Response to “Alarming WordPress Security Vulnerabilities”


Subscribe without commenting


Leave a Reply

Note: Any comments are permitted only because the site owner is letting you post, and any comments will be removed for any reason at the absolute discretion of the site owner.