Disclosure: WordPress WPDB SQL Injection - Background

This page did not load. You can still read it on the original site — the toolbar below keeps your place in the directory.

Today, a significant SQL-Injection vulnerability was fixed in WordPress 4.8.3. Before reading further, if you haven’t updated yet stop right now and update. The foundations of this vulnerability was reported via Hacker-One on September 20th, 2017. This post will detail the background on the vulnerability as well as why I publicly threatened to Fully Disclose. There is another post which deals with…

Read on blog.ircmaxell.com ↗