Security researchers have discovered vulnerabilities in a All in One SEO Pack WordPress extension that leaves sites susceptible to remote hijacking.
Update your #WordPress sites if you use this plugin folks!
Update your #WordPress sites if you use this plugin folks!
Bugs in widely used WordPress plug-in leave sites vulnerable to hijacking
All in One SEO Pack gives unprivileged users admin powers.
the daily wordpress vulnerability? :}
Considering WordPress powers about 20% off all websites on the Internet it's a pretty big target.
as a security and forensics guy and speaking from experience with monitoring our webhosting datacenters around the world — as a normal thing, wp, wp plugins and tools have some of the lowest quality code in existence. it's not that it's a big target because it's popular, it's a big target because the security of wp itself and wp plugins is just really awful.
I'd wager that it's more on the plugin end of things; but that's just from my past experience.