WordPress kept users and hackers in the dark while secretly fixing critical zero-day

By: Zeljka Zorz

WordPress released the newest version (4.7.2) of the popular CMS, ostensibly fixing three security issues affecting versions 4.7.1 and earlier.

What the WordPress team didn’t share at that time is that the update also secretly fixes a bug that allows unauthenticated users to modify the content of any post or page within a WordPress site. [Read more…]

Source: Helpnet Security