Wordpress Database Reset Vulnerability

Posted by FiroSolutions on Thursday January 30, 2020 @09:16AM
from the blog.firosolutions.com dept.

https://blog.firosolutions.com/exploits/wordpress-reset-vulnerability/

( 6 comments | 8 points | on HN )

Re:Wordpress Database Reset Vulnerability by mpclark on Thursday January 30, 2020 @09:44AM (#22191572)

Note: This is a problem with a plugin called "WordPress Database Reset" and not a general 'database reset' vulnerability

[ Parent | on HN ]

Re:Wordpress Database Reset Vulnerability by cdubzzz on Thursday January 30, 2020 @09:50AM (#22191617)

This is worth a title clarification, I think. Seems a pretty clear attempt to sensationalize. E.g. “Vulnerability in Wordpress Database Reset Plugin” would be clearer.

[ Parent | on HN ]

Re:Wordpress Database Reset Vulnerability by smileybarry on Thursday January 30, 2020 @10:12AM (#22191821)

Oh, that makes this a lot less exciting than it seemed.

[ Parent | on HN ]

Re:Wordpress Database Reset Vulnerability by tarosnow on Thursday January 30, 2020 @09:53AM (#22191639)

I wish there was a way to contribute to plugins in WP.org. Everything in there still feels so archaic.

[ Parent | on HN ]

Re:Wordpress Database Reset Vulnerability by sct202 on Thursday January 30, 2020 @09:56AM (#22191680)

What do you mean? All you have to do is package the plugin and submit it for approval for it to be posted.

[ Parent | on HN ]

Re:Wordpress Database Reset Vulnerability by dt3ft on Thursday January 30, 2020 @09:48AM (#22191600)

Active installations: 80,000+

Yikes!

[ Parent | on HN ]