Tag: xss

WordPress

Code Injection Follow Up

I have release 2 security updates to WP-Polls and WP-PostRatings which basically removes a malicious code that allows code injection. The malicious code is as follows: if ($_SERVER[‘PHP_SELF’] == @links_add_base_url(“/”, $_SERVER[‘HTTP_REFERER’])) return; The code itself does nothing, but hackers are spoofing the $_SERVER[‘HTTP_REFERER’] that allows…

(94 votes, average: 3.71 out of 5)
WP-PostRatings

WP-PostRatings 1.61

I have released WP-PostRatings 1.61 which fixes a code injection via “HTTP Referrer” and affects users who are on WP-PostRatings 1.50 only. This is the same code injection fixed for WP-Polls few days back. I have checked the rest of my plugins to ensure that…

(267 votes, average: 3.93 out of 5)
WP-Polls

WP-Polls 2.61

I have released WP-Polls 2.61 which fixes a code injection via “HTTP Referrer” and affects users who are on WP-Polls 2.60 only. I also took this chance to port the readme.html to the proper readme.txt which WordPress.org is using and now you can see all…

(104 votes, average: 3.74 out of 5)