Posts Tagged: ‘critical’

Millions of WordPress sites receive forced patch for critical plugin flaw

Millions of WordPress sites have received a forced patch over the past few days, Ars Technica has reported. The reason is a vulnerability in UpdraftPlus, a popular plugin that allows users to create and restore website backups. UpdraftPlus developers requested the mandatory patch, as the vulnerability would allow anyone with an account to download a website's entire database. 

The bug was discovered by Jetpack security researcher Marc Montpas during a security audit of the plugin. "This bug is pretty easy to exploit, with some very bad outcomes if it does get exploited," he told Ars Technica. "It made it possible for low-privilege users to download a site's backups, which include raw database backups." 

He told UpdraftPlus developers about the bug on Tuesday last week, they fixed it a day later and started force-installing the patch shortly after that. 1.7 million sites had received it as of Thursday, out of 3 million-plus users.

The main flaw was that UpdraftPlus didn't correctly implement WordPress's "hearbeat' function by properly checking to see if users had administrative privileges. Another issue was a variable used to validate admins that could be modified by untrusted users. Jetpack provided more details about how a hack could work in a blog post.

WordPress was previously breached earlier this year, but it was done indirectly via a GoDaddy hack that exposed 1.2 million accounts. If you're running WordPress with the UpdraftPlus plugin, you should definitely confirm that the plugin updated automatically to 1.22.4 or later on the free version, or 2.22.4 and up on the premium app. 

Engadget is a web magazine with obsessive daily coverage of everything new in gadgets and consumer electronics

Oxygen OS Open Beta 4 for the OnePlus 7/Pro fixes critical bugs and adds features

Oxygen OS Open Beta 4 has been released for the OnePlus 7 Pro and will hit the OnePlus 7 next week. There have been many system-level issues with both phones that are being addressed, such as screen flashing, mobile data disruptions after an upgrade and more. New features are also being added, such as raise […]

Come comment on this article: Oxygen OS Open Beta 4 for the OnePlus 7/Pro fixes critical bugs and adds features

Visit TalkAndroid


TalkAndroid

China cracks down on Twitter users critical of its government

It won't surprise you to hear that China keeps a tight lid on homegrown social networks, but it's now doing more to stifle free expression on outside networks, too. The New York Times reported that Chinese law enforcement recently began a crackdown…
Engadget RSS Feed

Netflix pulls Hasan Minhaj episode critical of Saudi Arabia government

Netflix rarely finds itself thrust into political debates like other internet giants, but it won't enjoy that luxury in 2019. The streaming service has pulled the second episode of Patriot Act with Hasan Minhaj in Saudi Arabia after the country alle…
Engadget RSS Feed

SpaceX Dragon spacecraft returns to Earth with ‘critical’ cargo

SpaceX’s Dragon spacecraft returns to Earth from ISS, bringing with it scientific cargo that NASA says will be critical to its planned Journey to Mars.

The post SpaceX Dragon spacecraft returns to Earth with ‘critical’ cargo appeared first on Digital Trends.

Cool Tech–Digital Trends