Security News

WordPress Patches Zero-Day Vulnerability (Threatpost)
2015-04-28 17:12

WordPress quickly turned around a patch for a stored cross-site scripting zero-day vulnerability in the CMS' core engine.

Stored XSS bug in WordPress, researchers advise to disable comments (SC Magazine)
2015-04-27 21:48

Comments considered harmful: WordPress web hijack bug revealed (The Register)
2015-04-27 19:48

Klikki Oy - WordPress 4.2 Stored XSS (Reddit)
2015-04-27 18:48

Millions of WordPress sites at risk of hijack after zero-day released (ZDNet)
2015-04-27 18:48

WordPress Flaw Allows Arbitrary Code Execution via Comments: Researcher (SecurityWeek)
2015-04-27 18:48

Just-released WordPress 0day makes it easy to hijack millions of websites (ArsTechnica)
2015-04-27 18:48

WordPress Under Attack As Double Zero-Day Trouble Lands (Forbes)
2015-04-27 18:48

Details on WordPress Zero Day Disclosed (Threatpost)
2015-04-27 15:56

A Finnish researcher has disclosed details on an unpatched stored cross-site scripting vulnerability in the WordPress core engine.

WordPress vulnerable to yet another, still to be patched XSS flaw (Help Net Security)
2015-04-27 13:18

The latest WordPress version (4.2, released on Thursday) and several earlier ones are vulnerable to a stored cross-site scripting (XSS) vulnerability that can be exploited to inject JavaScript in Word...