Switch to the dark mode that's kinder on your eyes at night time.

Switch to the light mode that's kinder on your eyes at day time.

Switch to the dark mode that's kinder on your eyes at night time.

Switch to the light mode that's kinder on your eyes at day time.

Reflected XSS in WordPress v5.5.1 and Lower (blog.sucuri.net)

by WPNEWS admin November 22, 2020, 13:07

WordPress released version 5.5.2 yesterday, which fixed a reflected XSS vulnerability we reported earlier this year. The root cause of this issue is a bug in the way WordPress determines a user’s current page, and which may cause a few other problems as well.

vulnerability WordPress 5.5.1 XSS

More From: Security

Wordfence Launches Bug Bounty Program to Fund WordPress Security Research and Showcase Researchers (www.wordfence.com)
At Defiant Inc and Wordfence, our mission is to Secure the Web. A critical component of creating and maintaining a secure online community is the research that reveals vulnerabilities in[…]
4 Million WordPress Sites affected by Stored Cross-Site Scripting Vulnerability in LiteSpeed Cache Plugin (www.wordfence.com)
On August 14, 2023, our Wordfence Threat Intelligence team identified and began the responsible disclosure process for a stored Cross-Site Scripting (XSS) vulnerability in LiteSpeed Cache plugin, which is actively[…]
How to Find & Fix Japanese SEO Spam (blog.sucuri.net)
Japanese SEO Spam, also known as “Japanese keyword hack” or “Japanese SEO poisoning,” is a spammy search engine optimization technique used by black hat SEO artists to make a website[…]
The WordPress “Zombie” Plugins Pandemic Affects 1.6M+ Websites (patchstack.com)
The WordPress ecosystem is getting better with addressing security issues, but there is one big bottleneck – unreachable plugin developers.
2023 WordPress Security Survey – What we have learned (melapress.com)
Melapress presents the results and findings of its WordPress Security Survey 2023 edition held online, and in-person at WCEU.
All-In-One Security Plugin Patches Sensitive Data Exposure Vulnerability in Version 5.2.0 (wptavern.com)
All-In-One Security (AIOS), a plugin active on more than a million WordPress sites, was found to be logging plaintext passwords from login attempts in the database and has patched the[…]

Reflected XSS in WordPress v5.5.1 and Lower (blog.sucuri.net)

Leave a ReplyCancel reply

Loginizer Plugin Gets Forced Security Update for Vulnerabilities Affecting 1 Million Users (wptavern.com)

Wordfence Launches Bug Bounty Program to Fund WordPress Security Research and Showcase Researchers (www.wordfence.com)

4 Million WordPress Sites affected by Stored Cross-Site Scripting Vulnerability in LiteSpeed Cache Plugin (www.wordfence.com)

How to Find & Fix Japanese SEO Spam (blog.sucuri.net)

The WordPress “Zombie” Plugins Pandemic Affects 1.6M+ Websites (patchstack.com)

2023 WordPress Security Survey – What we have learned (melapress.com)

All-In-One Security Plugin Patches Sensitive Data Exposure Vulnerability in Version 5.2.0 (wptavern.com)

Twenty Twenty-One: A Deep Dive into the New Default WordPress Theme (kinsta.com)

New free plugin: DemoPress (www.dev4press.com)

Leave a ReplyCancel reply

Log In

Sign In

Forgot password?

Your password reset link appears to be invalid or expired.

Log in

Privacy Policy

Add to Collection

No Collections