WordPress 4.7.1 with 8 security updates and 61 fixes

The 4.7.1 version of WordPress CMS has been released with 8 security updates and fixes for 61 bugs of the previous version.

Below are the security snapshots fixed in the new WordPress update:wordpress

Remote Code Execution (RCE) in PHPMailer
The REST API exposed data for all users who had written a post. WrrdPress 4.7.1 limits it to types of posts that we define that should appear.
Cross-site scripting (XSS) through the plugin name or version header of update-core.php.
Cross-site request forgery (CSRF) bypass through a u Flash.
Cross-site scripting (XSS) via theme name fallback.
Checking if the default mail.example.com setting has been changed to the allow option by email.
A cross-site request forgery (CSRF) discovered in widget editing.
Small encryption in the multisite activation key.

You can read the bug fixes from the link below.

https://codex.wordpress.org/Version_4.7.1

iGuRu.gr The Best Technology Site in Greecefgns

every publication, directly to your inbox

Join the 2.087 registrants.

activationbugsbypassCMScross-sitecsrfEmailI'm surePluginrequestrestscriptingsecuritysecurity updatesthemeupdateswidgetwordpressXSSbetter safetysecuritydataversionmodeusers

Written by giorgos

George still wonders what he's doing here ...

Leave a reply

Your email address is not published. Required fields are mentioned with *

Your message will not be published if:
1. Contains insulting, defamatory, racist, offensive or inappropriate comments.
2. Causes harm to minors.
3. It interferes with the privacy and individual and social rights of other users.
4. Advertises products or services or websites.
5. Contains personal information (address, phone, etc.).