Disclosure: WordPress WPDB SQL Injection – Technical – Ircmaxell’s Blog

Today, a significant SQL-Injection vulnerability was fixed in WordPress 4.8.3. Before reading further, if you haven’t updated yet stop right now and update. The foundations of this vulnerability was r… Read more

Read full article

Similar

Released v0.6 of GraphQL API for WordPress

I have just released version 0.6 of the GraphQL API for WordPress 🎉. (more…)

CC Search to Join WordPress.org

The WordPress community has long advocated for a repository with GPL-compatible images, and it’s time to listen to that need. CC Search, a CC0 (Creative Commons Zero) image search engine, is joinin… (more…)

Large-scale attack tries to steal configuration files from WordPress sites

Attackers tried to download configuration files from WordPress sites so they could steal database credentials. (more…)

WordPress Version 6.1

On November 1, 2022, WordPress 6.1 “Misha” was released to the public. For more information on this release, read the WordPress 6.1 announcement. For Version 6.1, the database version (… (more…)

From WordPress to Ghost to WordPress

I've spent a lot of time using WordPress. I built CSharpening.net on WordPress. I maintained my own theme and used a large host of plugins. I had plugins for syntax highlighting, spam protection and took advantage of Jetpack. I hosted my site on Arvixe. ...

Latest News

AI Brad Pitt dupes French woman out of €830k

Async Rust is about concurrency, not (just) performance

Amid a flurry of hype, Microsoft reorganizes entire dev team around AI