WordPress Issues Patch for Critical Flaw That Can Enable Code Execution on Some Servers

WordPress has fixed a critical flaw in its core software that lets an attacker with no account make a site load a PHP file from outside its theme folders. On some servers, that can go further, allowing the attacker to run their own code. The fix shipped on September 22 in WordPress 7.1.2, with fixes for every branch the project still supports, back to 4.7, and WordPress is telling site owners

thehackernews.com ·3h ago

WordPress Issues Patch for Critical Flaw That Can Enable Code Execution on Some Servers

We haven't written up this one. The Hacker News has the full story — the link below goes straight to it.

Read the original at thehackernews.com →

Issued invoices with same number cause confusion and lost payments
Google Sheets template auto-generates invoice numbers from cell B4
Log tab provides reliable source for generating continuous invoice numbers

3h ago ·dev.to

Apple Releases Firmware Update for Beats 360

Apple today released a firmware update for the Beats 360 over-ear headphones, so customers ordering the headphones will have new software available when they arrive.

3h ago ·macrumors.com

WordPress Issues Patch for Critical Flaw That Can Enable Code Execution on Some Servers

More in Tech

Microsoft's most useful Windows toolkit turns 30 this year, and it still doesn't ship with Windows 11

Malicious npm Package Poses as Twilio Bug-Bounty Probe, Can Exfiltrate Credentials

BigCommerce Data Stolen via Ribon Apps Hack

ShinyHunters claims major FBI hack, thousands of employees’ data stolen

Two Invoices, One Number: Allocate Invoice Numbers From the Log, Not a Cell

Apple Releases Firmware Update for Beats 360