WordPress 4.5.2 Security Release WordPress 4.5.2 is now available. This is a security release for all previous versions and we strongly encourage you to update your sites immediately. WordPress versions 4.5.1 and earlier are affected by a SOME vulnerability through Plupload, the third-party library WordPress uses for uploading files. WordPress versions 4.2 through 4.5.1 are vulnerable to reflected XSS using specially crafted URIs through MediaElement.js, the third-party library used for media players. MediaElement.js and Plupload have also released updates fixing these issues. Both issues were analyzed and reported by Mario Heiderich, Masato Kinugawa, and Filedescriptor from Cure53. Thanks to the team for practicing responsible disclosure, and to the Plupload and MediaElement.js teams for working closely with us to coördinate and fix these issues. Download WordPress 4.5.2 or venture over to Dashboard → Updates and simply click “Update Now.” Sites that [ more... ]
The post WordPress 4.5.2 Security Release appeared first on 지락문화예술공작단.
원문출처 : https://jirak.net/wp/wordpress-4-5-2-security-release/
댓글 0
번호 | 제목 | 글쓴이 | 날짜 | 조회 수 |
---|---|---|---|---|
82 | Contributor Weekend: Support Forums | 관리자 | 2016.01.23 | 81 |
81 | install proftpd with account in sql | 관리자 | 2016.01.26 | 48 |
80 | 그누보드 짧은 주소 작성 (nginx) | 관리자 | 2016.02.02 | 54 |
79 | 그누보드 짧은 주소 작성 (httpd,apache) | 관리자 | 2016.02.03 | 34 |
78 | How to solve “Unable to run mksdcard SDK tool” when installing Android Studio on Centos7 | 관리자 | 2016.02.06 | 143 |
77 | 안드로이드 스튜디오 단축키 (공식) | 관리자 | 2016.02.12 | 30 |
76 | 알아두면 유용한 안드로이드 스튜디오의 단축키 | 관리자 | 2016.02.12 | 21 |
75 | cannot resolve symbol R on android studio | 관리자 | 2016.02.17 | 65 |
74 | Experiment: WordCamp Incubator | 관리자 | 2016.02.19 | 24 |
73 | php + freetds for mssql on linux | 관리자 | 2016.02.24 | 17 |
72 | install pptpd on linux (centos) | 관리자 | 2016.02.26 | 22 |
71 | firewalld 기반의 접근제어 사용하기 | 관리자 | 2016.03.15 | 21 |
70 | FortiGate configure manage ip on CLI | 관리자 | 2016.03.16 | 16 |
69 | /etc/sysconfig/iptables 에 포트 리다이렉션 추가해 주기 | 관리자 | 2016.03.25 | 34 |
68 | keepalive + LVS on centos7 | 관리자 | 2016.03.31 | 30 |