News for hackers. Stuff that matters.

A comment on Disclosure of Additional Security Fix in WordPress 4.7.2. Parent comment

Re:Disclosure of Additional Security Fix in WordPress 4.7.2 by hannob on Thursday February 02, 2017 @11:08AM (#13551529)
1. You're using Wordpress, that's already good. It has autoupdates. You're unlikely to get hit by a vuln like this.

2. Don't disable autoupdates.

3. Avoid plugins and external themes. If you can stick to Wordpress Core. If you use plugins use as few as possible and only ones that are maintained regularly. Keep plugins and themes updated.

4. Don't disable autoupdates.

Also, have I mentioned you shouldn't disable autoupdates?

[ Parent | on HN ]
Re:Disclosure of Additional Security Fix in WordPress 4.7.2 by bigmanwalter on Thursday February 02, 2017 @04:18PM (#13554741)
What if my clients like their absurd selections of plugins and themes?
[ Parent | on HN ]