Trail of Bits

Headlines · 1

1. 5h
   WordPress 7.1.3 patches 7 flaws, 3 reported by Anthropic

   WordPress released version 7.1.3 on October 6, fixing seven security vulnerabilities and four program bugs. Anthropic reported three of the seven flaws, while security firms Trail of Bits and Patchstack each reported one, three independent researchers jointly submitted one, and WordPress's own security team found the last. Anthropic's findings cover a delayed-trigger injection in the WXR exporter, a denial-of-service flaw in WP_Http::make_absolute_url(), and an author-role privilege issue allowing posts to be pinned; the report says the most serious issue was a stored XSS in the comment moderation interface found by Trail of Bits' Thomas Chauchefoin.

   AIbase AI新闻 · 🔥 9

Experience and discussion from the community

Share my Trail of Bits experienceAsk about Trail of Bits