Technology
WordPress security flaws: 800,000 sites running NextGen Gallery plugin potentially vulnerable to pwnage – The Daily Swig
Unpatched sites could get pwned – but admins must fall for social engineering
Unpatched sites could get pwned but admins must fall for social engineering
Users of NextGEN Gallery, the image management plugin for WordPress, have been urged to update their websites after the discovery of serious cross-site request forgery (CSRF) vulnerabilities.
The most serious of two flaws found by security researchers each residing in separate functions could lead to remote code execution (RCE) and stored cross-site scripting (XSS).
As a result, attackers could take control of a website,…
-
General24 hours agoNRL live: Dragons vs Panthers, Titans vs Tigers, Bulldogs vs Sharks
-
General20 hours agoVideo allegedly showing man trying to catch freshwater crocodile prompts investigation
-
General21 hours agoLions on the brink with Eric Hipwood and Lachie Neale set to miss rest of premiership defence
-
General22 hours agoIsrael Defense Forces announce humanitarian area in Khan Younis