'Critical' zero-day bug found in three popular WordPress plugins | #Update asap!!! | #CyberSecurity #Blogs | WordPress and Annotum for Education, Science,Journal Publishing | Scoop.it
From www.grahamcluley.com - October 3, 2017 11:43 AM
Outdated versions of three popular WordPress plugins suffer from a "critical" zero-day vulnerability that enables an attacker to take over a website.

The bug is a PHP object injection flaw that affects the following plugins: Appointments (versions prior to 2.2.2), Flickr Gallery (versions prior to 1.5.3), and RegistrationMagic-Custom Registration Forms (versions prior to 3.7.9.3).

Together, those plugins have a combined user base of over 21,000 WordPress customers. All three have already received a fix for the security issue, which is rated "Critical" with a CVSS rating of 9.8.

 

 Learn more / En savoir plus / Mehr erfahren:

 

http://www.scoop.it/t/wordpress-annotum-for-education-science-journal-publishing/?&tag=Cybersecurity