Two unauthenticated WordPress plugin vulnerabilities became public in recent days: an SQL injection in All-in-One WP Migration and Backup, installed on five million-plus sites per the WordPress.org directory, and an arbitrary file upload in Gravity Forms, a commercial form plugin. Both fixes shipped on August 20, the same day. What…

خلاصه خبر از webhosting.today؛ متن کامل در وب‌سایت منبع در دسترس است.

Related posts:

  1. Automattic’s Board Put Matt Mullenweg on Paid Leave. He Still Leads the WordPress Project.
  2. A cPanel Account With Mail Privileges Could Reach Root. Every Supported Version Was Affected.
  3. Nearly Two-Thirds of All-in-One WP Migration Installs Remain Unpatched Two Weeks Later
  4. Parked Domains Distort Hosting Rankings. So Do Corporate Registrars.