4 ms·
For the curious: "The plugin in question was Custom Content Type Manager (CCTM), a popular WordPress plugin for creating custom post types that, in the three ye
by iokevins 11y ago
For the curious: "The plugin in question was Custom Content Type Manager (CCTM), a popular WordPress plugin for creating custom post types that, in the three years since it was uploaded on the WordPress plugin repo, has amassed quite a following, being currently installed on more than 10,000 sites."
- stevesearer 11y agoAlso important to note that WordPress guru Otto commented the following on the Sucuri post about the vulnerability[1]: "The plugin has been updated to 0.9.8.9, which is a copy of 0.9.8.6 (the last good version). This will remove the malicious code from the plugin, but not any code that was added to sites in the meantime. Please follow through with the Mitigation steps given by Denis in the post." [1] https://blog.sucuri.net/2016/03/when-wordpress-plugin-goes-bad.html https://blog.sucuri.net/2016/03/when-wordpress-plugin-goes-b...
- leepowers 11y ago10,000 sites is 10,000 sites too many for this type of vulnerability. But it's a relatively trivial install base, given that a competitor plugin (ACF) has over a million installs: https://wordpress.org/plugins/advanced-custom-fields/ https://wordpress.org/plugins/advanced-custom-fields/