WordPress sites can be attacked while installing a fix for an exploited flaw
VULNERABILITYPicus Securityredteam/daily · 1 source
- Severity
- High
- Sources
- 1
What happened
Researcher Umut Bayram of Picus Security found that the update installing the fix for an actively exploited WordPress flaw still unpacks files using the site's old, unpatched code. An attacker who strikes at the right moment can execute code on the server. The researcher advises blocking web access to the site during the update, though the article is cut off before giving the full guidance.
For IT people · Written by AI from 1 source · Wrong?
What to do
- Block web access to the WordPress site while the fix is being installed, as the researcher advises.
- Check whether your WordPress sites are running the affected flaw and apply the fix as soon as it is available.
Written by AI from the sources, checked against them
Full story timeline · 1 update
Who reported · 1 outlet
The Hacker News
Who and what is in it
Companies
Products