Security News

WordPress Launches Public Bug Bounty Program (SecurityWeek)

2017-05-17 08:18

#bounty #bugbounty #securityweek #wordpress

Session Hijacking, Cookie-Stealing WordPress Malware Spotted (Threatpost)

2017-05-10 20:03

Researchers spotted a strain of cookie stealing malware, injected into a legitimate JavaScript file, masquerading as a WordPress core domain.

#hijacking #malware #threatpost #wordpress

WordPress admins, take note: RCE and password reset vulnerabilities revealed (Help Net Security)

2017-05-04 18:59

Independent security researcher Dawid Golunski has released a proof-of-concept exploit code for an unauthenticated remote code execution vulnerability in WordPress 4.6 (CVE-2016-10033), and...

#RCE #security #vulnerabilities #wordpress #CVE-2016-10033 #CVE-2017-8295

Unpatched WordPress Password Reset Vulnerability Lingers (Threatpost)

2017-05-04 16:46

A zero day vulnerability exists in WordPress Core that in some instances, could allow an attacker to reset a user's password and in turn, gain access to their account.

#threatpost #vulnerability #wordpress

Unpatched Wordpress Flaw Could Allow Hackers To Reset Admin Password (The Hackers News)

2017-05-04 11:11

WordPress, the most popular CMS in the world, is vulnerable to a logical vulnerability that could allow a remote attacker to reset targeted users’ password under certain circumstances. The...

#hacker #wordpress #CVE-2017-8295