Security News

WordPress Ecommerce Plugin Vulnerability Details Disclosed (Threatpost)
2015-04-29 18:28

Details on a number of unpatched vulnerabilities in a popular WordPress ecommerce plugin called CartPress were disclosed.

5,000+ e-commerce sites at risk due to buggy WordPress plugin (Help Net Security)
2015-04-29 15:07

A popular WordPress e-commerce plugin that is actively used on over 5,000 websites contains high-risk vulnerabilities that can be exploited to compromise customers' data, execute arbitrary PHP code, a...

WordPress Rushes to Fix Critical Zero-Day Vulnerability (SecurityWeek)
2015-04-28 22:48

WordPress Patches Critical Flaw (April 27, 2015) (SANS Newsbites)
2015-04-28 22:48

WordPress Patches Zero-Day Vulnerability (Threatpost)
2015-04-28 17:12

WordPress quickly turned around a patch for a stored cross-site scripting zero-day vulnerability in the CMS' core engine.

Stored XSS bug in WordPress, researchers advise to disable comments (SC Magazine)
2015-04-27 21:48

Comments considered harmful: WordPress web hijack bug revealed (The Register)
2015-04-27 19:48

Klikki Oy - WordPress 4.2 Stored XSS (Reddit)
2015-04-27 18:48

Millions of WordPress sites at risk of hijack after zero-day released (ZDNet)
2015-04-27 18:48

WordPress Flaw Allows Arbitrary Code Execution via Comments: Researcher (SecurityWeek)
2015-04-27 18:48