Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!

 



Forgot your password?
typodupeerror
DEAL: For $25 - Add A Second Phone Number To Your Smartphone for life! Use promo code SLASHDOT25. Also, Slashdot's Facebook page has a chat bot now. Message it for stories and more. Check out the new SourceForge HTML5 Internet speed test! ×

Submission + - Top WordPress Plugins Contain Serious Security Vulnerabilities (securityweek.com)

wiredmikey writes: According to recent analysis of the top 50 most downloaded plugins for the WordPress platform, 18 were vulnerable and could be exploited to infect Websites and distribute malware. Out of the top 10 most popular e-commerce plugins, seven contained serious security flaws. Two were directly from the WordPress team and affected BuddyPress, and several dealt with online payments or interacted with Facebook and other social networks, according to Maty Siman of security firm Checkmarx.

Many of the popular add-ons could be exploited by a number of common attacks, such as SQL injection and cross-site scripting, Checkmarx found, meaning that attackers can easily use an automated exploit kit and point it to a WordPress site and compromise it.

This problem isn't unique to WordPress. While the survey looked at only WordPress plugins because of the platform's popularity, other content management platforms and other Web software suffer similar problems.

This discussion was created for logged-in users only, but now has been archived. No new comments can be posted.

Top WordPress Plugins Contain Serious Security Vulnerabilities

Comments Filter:

Logic doesn't apply to the real world. -- Marvin Minsky

Working...