Vulnerability Bulletins |
Misuse of WordPress update_option() function Leads to Website Infections |
|
| Affected software | Wordpress |
|
http://feedproxy.google.com/~r/sucuri/blog/~3/14qhYm0gpJs/misuse-of-wordpress-update_option-function-leads-to-website-infections.html In the past four months, Sucuri has seen an increase in the number of plugins affected by the misuse of WordPress’ update_option() function. This function is used to update a named option/value in the options database table. If developers do not implement the permission flow correctly, attackers can gain admin access or inject arbitrary […] More info: http://feedproxy.google.com/~r/sucuri/blog/~3/14qhYm0gpJs/misuse-of-wordpress-update_option-function-leads-to-website-infections.html |
|