News for hackers. Stuff that matters.

A comment on Disclosure of Additional Security Fix in WordPress 4.7.2.

Re:Disclosure of Additional Security Fix in WordPress 4.7.2 by jgrahamc on Thursday February 02, 2017 @09:59AM (#13550913)
Because of the severity of the issue we decided to roll out WAF rules for all our customers (i.e. including those that don't get the WAF because they are on a free plan): https://blog.cloudflare.com/protecting-everyone-from-wordpre...

Currently, we are seeing people probing this vulnerability.

[ Parent | on HN ]
Re:Disclosure of Additional Security Fix in WordPress 4.7.2 by porker on Thursday February 02, 2017 @11:14AM (#13551587)
Does anyone know of a set of WAF rules - free or commercial - that I can use on my server, rather than outsourcing to Sucuri or CloudFlare?

I have used modsecurity before and found writing rules difficult, so happy to pay.

[ Parent | on HN ]