There is a bug in WordPress right now that is rather critical for anyone who uploads posts without immediately publishing. Simply by manipulating the URL any visitor can view all future, draft, or pending posts. Our site was vulnerable to this issue, but we patched it quickly because it could be used to retrieve the CyberNotes posts that we write ahead of time.
WordPress Hacked: Anyone Can View Future/Draft Posts
Saturday, December 29, 2007
Subscribe to:
Post Comments (Atom)
No comments:
Post a Comment