WordPress 4.7.2 post-mortem

A few weeks ago, WordPress released version 4.7.2 to
address several security vulnerabilities, including one critical one.
This vulnerability allowed a remote, unauthorised attack to update web pages via
the REST API. Since then, hundreds of thousands of … Read more

Similar

How I Moved My Medium to WordPress.com

Richard Pryor in the brilliant film, Moving.I recently decided to part ways with Blogger and Medium. Blogger has been good to me for many years but it is clearly an un/under-maintained product that…...

Read more »

Protecting Everyone from WordPress Content Injection

Today a severe vulnerability was announced by the WordPress Security Team that allows unauthenticated users to change content on a site using unpatched (below version 4.7.2) WordPress. CC BY-SA 2.0 image by Nicola Sap De Mitri The problem was found by the...

Read more »