Update Lagi Yukk. Celah XSS 0day WordPress 4.2 pada Fitur Komentar

[PusatHosting]

Kemarin sudah kena ini dan sekarang ada yang baru yaitu XSS 0day pada fitur komentar wordpress. Sudah tersedia patch 4.2.1 Silahkan update.
Info detail dari securi .

**Update 20150427**: A patch has been released and made available by the WordPress Core Team in version 4.2.1 – Please update immediately.

Yes, you’ve read it right: a critical, unpatched 0-day vulnerability affecting WordPress’ comment mechanisms was disclosed earlier today by Klikki Oy.

Who’s affected
If your WordPress site allows users to post comments via the WordPress commenting system, you’re at risk. An attacker could leverage a bug in the way comments are stored in the site’s database to insert malicious scripts on your site, thus potentially allowing them to infect your visitors with malware, inject SEO spam or even insert backdoor in the site’s code if the code runs when in a logged-in administrator browser.

You should definitely disable comments on your site until a patch is made available or leverage a WAF to protect your site and customers.

sumber : https://blog.sucuri.net/2015/04/critical-persistent-xss-0day-in-wordpress.html

 

[mustafaramadhan]

Soal update, wordfence selalu kirim email jika wordpress, theme dan plugin perlu diupdate.

 

[dhyhost]

lg bnyk update yak

 

[Rail Media]

perbaikan lagi

 

[PusatHosting]

Soal update, wordfence selalu kirim email jika wordpress, theme dan plugin perlu diupdate.

Dulu saya pakai, tapi sekarang tidak pakai plugin ini lagi. Nanti saya coba lagi pak

 

[atria]

Entah sejak versi berapa, rasa-rasanya wordpress selalu update otomatis kalau ada masalah security.
Tahu-tahu ada email bahwa blog sudah di upgrade ke versi x.x.x

 

[PusatHosting]

Entah sejak versi berapa, rasa-rasanya wordpress selalu update otomatis kalau ada masalah security.
Tahu-tahu ada email bahwa blog sudah di upgrade ke versi x.x.x

ini cara agar bisa automatic update https://codex.wordpress.org/Configuring_Automatic_Background_Updates

 

[atria]

ini cara agar bisa automatic update https://codex.wordpress.org/Configuring_Automatic_Background_Updates

Thanks mas.
Ternyata ada setting khususnya toh.

 

[Joshua]

Wah banyak ngelola WP harus update semua nih, makasi mas bwt info nya

 

[PadjajaranHost]

Baru update sudah update lagi