Disclosure: WordPress WPDB SQL Injection - Technical

This page did not load. You can still read it on the original site — the toolbar below keeps your place in the directory.

Today, a significant SQL-Injection vulnerability was fixed in WordPress 4.8.3. Before reading further, if you haven’t updated yet stop right now and update. The foundations of this vulnerability was reported via Hacker-One on September 20th, 2017. This post will detail the technical vulnerability as well as how to mitigate it. There is another post which deals with the background and time-lines .

Read on blog.ircmaxell.com ↗