CONNECT WITH US
Tech

Tech

WordPress 7.1.3 Fixes 7 Vulnerabilities And 1 Critical Flaw via @sejournal, @martinibuster

Search Engine Journal logo

Published on

Add as a preferred source on Google
WordPress 7.1.3 Fixes 7 Vulnerabilities And 1 Critical Flaw via @sejournal, @martinibuster

WordPress 7.1.3 addresses seven security vulnerabilities and fixes a critical flaw that can make image uploads fail with a fatal error.

WordPress announced a security release to address seven security vulnerabilities plus four bug fixes. This security release, Version 7.1.3, addresses a stored XSS, denial-of-service DoS and five other vulnerabilities of undisclosed severity level. WordPress recommends updating sites immediately.

The official announcement does not list severity ratings, CVSS scores,describe the vulnerabilities, or offer information of whether these vulnerabilities are being exploited in the the wild. However, WordPress recommends updating immediately.

The security fixes are also being backported to older WordPress branches eligible for security fixes, currently extending through WordPress 4.7, although those backports are still in progress. Backports will ship for older branches as they become ready.

The four bug fixes include three relatively benign issues that cause a poor user experience plus one that is critical.

Two of the bug fixes address oEmbed endpoints that return a 404 message. One is related to a music promotion platform and the other an eCard humor site. One of the fixes addresses a bug that may cause a website icon image in the admin to toolbar expand to gigantic proportions. The fourth can lead to a fatal error that sounds bad but probably isn’t that bad.

The fourth is a critical WordPress bug can make image uploads fail with a fatal error on hosts lacking an optional DOM library, leaving site owners unable to upload media. The WordPress ticket for this issue says that the image upload process stopped completely, so the image could not be uploaded.


Source link
Related Topics:Tech

Disclaimer

We strive to uphold the highest ethical standards in all of our reporting and coverage. We TheMorningPulse.fyi want to be transparent with our readers about any potential conflicts of interest that may arise in our work. It's possible that some of the investors we feature may have connections to other businesses, including competitors or companies we write about. However, we want to assure our readers that this will not have any impact on the integrity or impartiality of our reporting. We are committed to delivering accurate, unbiased news and information to our audience, and we will continue to uphold our ethics and principles in all of our work. Thank you for your trust and support.