[Vulnerability] Serious incident exploiting WordPress comment functionality: The threat of "Comment2Shell" and XSS caused by wpautop

In "WordPress," a CMS used by many websites and blogs around the world, serious security concerns related to comment functionality and automatic formatting features have emerged. We will explain in an ...
Searchenginejournal.com

WordPress Discovers XSS Vulnerability – Recommends Updating To 6.5.2

WordPress announced the 6.5.2 Maintenance and Security Release update that patches a store cross site scripting vulnerability and fixes over a dozen bugs in the core and the block editor. The same ...
Threatpost

WordPress Plugin WP Statistics Patches XSS Flaw

A cross-site scripting vulnerability in WordPress plugin WP Statistics could have enabled full website takeover. WordPress plugin WP Statistics has patched a cross-site scripting (XSS) vulnerability ...
Computerworld

Critical XSS flaws patched in WordPress and popular plug-in

New security updates released for the WordPress content management system and one of its popular plug-ins fix cross-site scripting (XSS) vulnerabilities that could allow attackers to take control of ...
InfoWorld

Persistent XSS flaws patched in multiple WordPress plugins

In addition to the All-in-One SEO plugin, WordPress administrators should update others that also have a cross-site scripting flaw Earlier this week, WordPress administrators were urged to update to ...