WordPress fired the dynamic {old}_to_{new} and {status}_{post_type} actions for any status and post type string, registered or not. A caller-influenced status or post type could build the name of an unrelated action and trigger its callbacks with the post's arguments. This vulnerability affects the following application versions: WordPress 3.6... Weiterlesen: Action Name Collision via Forgeable Post Status Transition Hooks in W…
Intelligence View
⚡ tsecurity.de Intelligence
Action Name Collision via Forgeable Post Status Transition Hooks in WordPress
WordPress fired the dynamic {old}_to_{new} and {status}_{post_type} actions for any status and post type string, registered or not. A caller-influenced status…
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
Intelligence Digest — kostenlos Täglich die wichtigsten Security-News · jederzeit abbestellbar
Community Rating & Social Proof
⭐ Leser-Wertung
War diese Seite hilfreich?