Partial retraction on YOAST.
Partial retraction on YOAST.
Yes, back up. But...
MaAnna Stephenson explains.
#wordpress #yoastplugin
Originally shared by MaAnna Stephenson
Yoast WordPress SEO plugin vulnerability
Read the fine print. Yes, it's already been fixed, and yes you need to update. But don't turn over the furniture to get to it.
Here's the only way the exploit can work:
"...a remote unauthenticated attacker could use this vulnerability to execute arbitrary SQL queries on the victim WordPress web site by enticing an authenticated admin, editor or author user to click on a specially crafted link or visit a page they control."
In other words, it's hard to exploit. A white hat hacker found this, reported it to team Yoast, and it's been patched.
There are no reports of it happening in the wild.
Keep calm and update when ready.
https://wpvulndb.com/vulnerabilities/7841
Yes, back up. But...
MaAnna Stephenson explains.
#wordpress #yoastplugin
Originally shared by MaAnna Stephenson
Yoast WordPress SEO plugin vulnerability
Read the fine print. Yes, it's already been fixed, and yes you need to update. But don't turn over the furniture to get to it.
Here's the only way the exploit can work:
"...a remote unauthenticated attacker could use this vulnerability to execute arbitrary SQL queries on the victim WordPress web site by enticing an authenticated admin, editor or author user to click on a specially crafted link or visit a page they control."
In other words, it's hard to exploit. A white hat hacker found this, reported it to team Yoast, and it's been patched.
There are no reports of it happening in the wild.
Keep calm and update when ready.
https://wpvulndb.com/vulnerabilities/7841
Thanks for helping get the word out Zara Altair
ReplyDeleteMaAnna Stephenson Thank you for the clarity. I should know. Note to self. Wait for MaAnna. :)
ReplyDelete