Simon Scannell on the RIPS Technologies GmbH blog described a vulnerability that allows an attacker to gain administrator access by inserting malicious code into a comment and trick an administrator to visit a website set up by the attacker to take complete control of your presentation (comments are enabled in WordPress for posts by default).

The post WordPress – admin account for an attacker! appeared first on DIGITAL SELF-DEFENSE.