Another Wordpress Plugin Vulnerability: WP-Forum 1.7.4
Milworm.com has released another Wordpress plugin vulnerability, this time it’s WP-Forum 1.7.4. I’m no expert at deciphering exactly how exploits work, but this remote sql injection appears to grant the attacker administrative privileges. If you’re using WP-Forum 1.7.4 or earlier on your Wordpress blog, uninstalling this vulnerable plugin is highly recommended.
I was unable to locate a patch or update, so if you happen to come across this information, please share your findings with everyone by submitting a comment.
In the mean time, here’s a list of potentially helpful sites:
http://www.milw0rm.com/exploits/4939 - the exploit code/example
http://www.fahlstad.se/wp-plugins/wp-forum/ - official plugin page?
http://www.fahlstad.se/?page_id=243 - plugin discussion/help forums
Technology Made Simple
Here is the...
No comments yet.