2 ms·
Disclosure: WordPress WPDB SQL Injection
- laken 9y agoThis author discovered a pretty huge WP vuln which he had difficulty getting WP to actually fix. Wordpress finally pushed a security update today, but not until he had to threaten FD. Wordpress Blog Post: https://wordpress.org/news/2017/10/wordpress-4-8-3-security-release/ https://wordpress.org/news/2017/10/wordpress-4-8-3-security-...
- stephenr 9y agoIt's 2017 and Wordpress developers still don't think their bullshit userland "prepared statements" are a security issue.