WordPress sites can be attacked while installing a fix for an exploited flaw
VULNERABILITYPicus Securityredteam/daily · 1 source
- Severity
- High
- Sources
- 1
What happened
Some WordPress websites can be attacked during the moment they install a security fix for a flaw that criminals are already using. The update briefly runs old code, so a well-timed attacker could run their own code on the server.
Like I’m new · Written by AI from 1 source · Wrong?
What to do
- Block web access to the WordPress site while the fix is being installed, as the researcher advises.
- Check whether your WordPress sites are running the affected flaw and apply the fix as soon as it is available.
Written by AI from the sources, checked against them
Full story timeline · 1 update
Who reported · 1 outlet
The Hacker News
Who and what is in it
Companies
Products