If you have a WordPress website and have not yet updated it to fix the recent security breach, it is VITAL that you do it ASAP!
As always, create a backup of your site BEFORE installing the latest security patches.
Security updates
WordPress 7.0.4
This release features several security fixes. Because this is a security release, it is recommended that you update your sites immediately.
The security team would like to thank the following people for responsibly reporting vulnerabilities, and allowing them to be fixed in this release
- Pre-authentication reflected XSS: A vulnerability on the login screen that can lead to PHP code execution.
- Stored XSS: Issues involving the emoji settings element, Post Content block, Quick Edit, and Post Date block for users with contributor-level access or higher.
- Privilege escalation: A multisite privilege-escalation issue when user registration is enabled.
- Information disclosure: Vulnerabilities involving the Latest Comments block and password-protected posts.
- Post-slug enumeration: Disclosure of notes in comment feeds.
- CSS injection: An issue where author-level CSS can be injected.
- Email confirmation bypass: A bypass of the email-address confirmation flow.
- Server-side request forgery (SSRF): An issue in URL validation involving link-local ranges.
These fixes are crucial for maintaining the security and integrity of WordPress sites. It is recommended to update to the latest version immediately to ensure all security vulnerabilities are addressed.
WordPress, 7.0.3, includes several security fixes to address vulnerabilities. Here are the key fixes included in this release:
Discover more from Mobile PC Rescue
Subscribe to get the latest posts sent to your email.