digg

Facebook Connect Join Digg About

Critical Wordpress vulnerability, UPDATE NOW!

hypocrisy.nu — It is possible for a malicious site visitor to register a special username and gain administrative privileges on your Wordpress Blog. Description and solution on-site.

Who dugg this?

Digg DudeWhat is Digg?

Digg is a place for people to discover and share content from anywhere on the web. Digg surfaces the best stuff as submitted and voted on by the community. Take the Tour to learn more.

2 Comments

show profanity settings
expand all
  • twilazoned, on 04/26/2008, -0/+2Good one to know!
  • JiggNJive, on 04/26/2008, -0/+1These things can get ugly pretty fast. A simple way to mitigate the initial threat vector and limit damage is to disable user registration for the time being until an update is installed (In this case, simply getting and installing the latest version of Wordpress)

    I'm glad the Digg was of help! :-)

  • Add a Comment

    Login or register to comment!
    Or, sign-in super fast with your Facebook account ...

© Digg Inc. 2009 — Content created and posted by Digg users is dedicated to the public domain | Terms of Use Updated | Privacy Policy
DIGG, DIGG IT, DUGG, DIGG THIS, Digg graphics, logos, designs, page headers, button icons, scripts, and other service names are the trademarks of Digg Inc.