Stories
Slash Boxes
Comments

SoylentNews is people

posted by Fnord666 on Monday August 17 2020, @05:29AM   Printer-friendly
from the 30000-sites-need-to-patch-wordpress-NOW dept.

Critical Flaws in WordPress Quiz Plugin Allow Site Takeover:

A plugin that is designed to add quizzes and surveys to WordPress websites has patched two critical vulnerabilities. The flaws can be exploited by remote, unauthenticated attackers to launch varying attacks – including fully taking over vulnerable websites.

The plugin, Quiz and Survey Master, is actively installed on over 30,000 websites. The two critical flaws discovered by researchers include an arbitrary file-upload vulnerability, ranking 10 out of 10 on the CVSS scale; as well as an unauthenticated arbitrary file deletion error, ranking 9.9 out of 10. A patch is available for both issues in version 7.0.1 of the plugin, said the researchers with Wordfence who discovered the flaws, in a Thursday post.

"The unauthenticated arbitrary file-deletion vulnerability that was present in the plugin is pretty significant," Chloe Chamberland, threat analyst with Wordfence, told Threatpost. "Any of the 30,000 sites running the plugin are subject to any file being deleted (granted they are running a vulnerable version), which includes the wp-config.php file, by unauthenticated site users."

[...] Researchers discovered the flaws on July 17, and after various unsuccessful attempts to contact the QSM plugin team, finally reached out to the plugin's parent company, ExpressTech on Aug. 1. A patch was released on Aug. 5 in version 7.0.1. The CVE assignments for both flaws are still pending, researchers said.

"We highly recommend updating to version 7.0.1 immediately to keep your site protected against any attacks attempting to exploit this vulnerability," said researchers.

Also at www.youtube.com


Original Submission

 
This discussion has been archived. No new comments can be posted.
Display Options Threshold/Breakthrough Mark All as Read Mark All as Unread
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
  • (Score: -1, Spam) by Anonymous Coward on Tuesday August 18 2020, @06:00AM

    by Anonymous Coward on Tuesday August 18 2020, @06:00AM (#1038225)

    Marissa Van Eck FAKENAME NIGGER CUNT Azuma Hazuki: So "that was NOT me posting" https://soylentnews.org/comments.pl?noupdate=1&sid=37033&page=1&cid=985641#commentwrap [soylentnews.org] which YES, you said when you LIBELED me publicly BEFORE it with YOU saying "So that's a "yes" to schizophrenia/schizoaffective disorder and a "no" to "am taking meds for said disorder" LIBELING ME then...?" per YOUR https://soylentnews.org/comments.pl?noupdate=1&sid=37033&page=1&cid=982854#commentwrap [soylentnews.org] you stupid pitiful FAKENAME fuck online LIAR piece of fucking SHIT NIGGER?

    OR

    Was it when I GOT YOUR REAL NAME & found you are a satanist/anti-god HERE https://redeeminggod.com/sermons/luke/luke_7_36-50/#comment-269796 [soylentnews.org] also which most ALL you "LEFTIST" LOSER weirdos usually are (which YES, in THIS other exchange "Why do you assume that you finding discussion threads on other sites with me in them will scare me?" quoted from https://soylentnews.org/comments.pl?noupdate=1&sid=38720&page=1&cid=1028402#commentwrap [soylentnews.org] you DID admit FINALLY to saying it was you - ESPECIALLY AFTER dozens of doctors RECENTLY seconded me on Hydroxychloroquin + Zinc (& Vitamin D3 imo along w/ other things I noted that are anti-viral + antibacterial like RAW GARLIC too)).

    Do me a favor - DENY ANY OF THOSE, please & I will continue PROVING YOU ARE A NIGGER SHITBAG LOSER, devil... as I already DID here https://soylentnews.org/comments.pl?noupdate=1&sid=38720&page=1&cid=1028211#commentwrap [soylentnews.org]

    The TRUE BEAUTY of SATANIST FUCKS like YOU (antigod assholes)? TRUTH & FACT DESTROYS LIBELOUS DEVILS LIKE YOU - just like I did you & OTHER AHOLES who doubted what I wrote on what is NOW PROVEN TRUE by DOCTORS, admitted in mainstream media etc. (as I showed in those links' exchanges above easily) & especially LATELY by DOZENS of doctors (I have proof from pros - NOT LIBEL like you did to me PUBLICLY & I can still FRY YOU FOR IT FUCKER, live in fear fuck) MINUS any psych pros backing you.

    SAY 1 THING, YOU STINKING LIBELOUS NIGGER FUCK & I will CONTINUE LEVELLING YOU PUBLICLY with facts - not libel as you tried on me, stupid "Marissa von DUMBO", lol - please, say 1 thing & the BEATING on you, PUBLICLY will continue in this thread where you will have a HELL of a TIME "downmod burying it" via downmod brigades doubtless ONLY yourself via multiple sockpuppet accounts etc. (downodding to HIDE it? FORGET IT vs. me - everyone sees you @ it now, lol - thanks, just as I SAID "your kind", demonic SWINE/antigod LOSERS, always do).

    WHY SHOULD YOU FEAR LIBELING ME PROJECTING IT NOW, TRYING TO HIDE IT TOO?

    TOUGH HIDING YOU LIED about LIBELING ME, especially via INHERENTLY DAMAGING STATEMENTS libeling me as you did see GOLDWATER RULE below too fuckface CUNT you are (wikipedia proof https://soylentnews.org/comments.pl?noupdate=1&sid=37033&page=1&cid=985366#commentwrap [soylentnews.org] & you said "No jury or judge would back it" here https://soylentnews.org/comments.pl?noupdate=1&sid=37033&page=1&cid=985353#commentwrap? [soylentnews.org] Ok - like I said earlier here which you TRIED TO DOWNMOD HIDE as I knew you HAVE to (everyone sees it anyhow) - TRY ME FUCKER - say 1 thing you COWARDLY STUPID LITTLE FUCK & we'll SEE what happens to you, fuckface CUNT you are).

    As I said "DO YOU WANT TO BE SUED" for breaking the GOLDWATER RULE? See here again https://soylentnews.org/comments.pl?noupdate=1&sid=37033&page=1&cid=985329#commentwrap [soylentnews.org] for YOUR (& everyone else's) reference of YOUR LIBEL of myself

    APK

    P.S.=> Oh, I am going to have a FIELDDAY on YOUR ASS fucker - catching you not ONLY IN LIES above, but also in the fact you are a GODLESS fucking LOSER - come on, say something, question the above where you LIED fucker ("it was not me saying it" but it WAS in those links calling me a nutcase essentially when YOU SAID YOU DID NOT (because it IS grounds for SUING THE LIFE OUT OF YOUR WORTHLESS ASS because your statements are NOT BACKED BY actual psychiatric pros in professional psychiatric grounds LIBELING ME)) - oh, you are NEVER going to LIVE THIS DOWN & believe you me - I am going to MAKE SURE you don't - live with your HUMILIATION loser... apk

    Starting Score:    0  points
    Moderation   -1  
       Spam=1, Total=1
    Extra 'Spam' Modifier   0  

    Total Score:   -1