Alarming WordPress Security Vulnerabilities

beNi released 3 alarming vulnerabilities in the popular WordPress blog platform

Cross Site Scripting – it didn’t work for me
Forced Redirect – it worked for me
Directory Traversal – n /a

Due to the really huge install base, I really hope that the folks at wordpress.org issue a patch quickly to address these vulnerabilities. Update : It sems that the site hosting the proof of concept exploits is down for maintenance.(thanks leion)

Thank you for reading this post. You can now Read Comment (1) or Leave A Trackback.

Print This Post

Post Info

This entry was posted on Sunday, February 11th, 2007 .

Tagged with: Web Applications

You can follow any responses to this entry through the Comments Feed. You can Leave A Comment, or A Trackback.

Previous Post: How to Turn Firefox Into an Attack Webserver »
Next Post: Here is the definitive fix for Universal PDF XSS Vulnerability »

Related Reading:

Back to the Homepage

Latest Posts:

One Response to “Alarming WordPress Security Vulnerabilities”

1
Leion
February 17th, 2007 01:27

All the links gave 404 error..

Note: Any comments are permitted only because the site owner is letting you post, and any comments will be removed for any reason at the absolute discretion of the site owner.