Search Results for: security

On Monday, Mark Jaquith confirmed that WordPress 4.3 will see an overhaul in the way passwords are generated. The changes will encourage WordPress users to strengthen their login credentials, making their websites more secure. A stronger password will also make your website less vulnerable to brute force attacks. The proposed updates focus on the way passwords are chosen, as well as changing some important default settings in the UI. Let’s take a quick look at the four main points coming out of the proposal: WordPress will generate strong passwords by default. You can override this setting and create your own password, […]

A WordPress security vulnerability has been discovered which could affect millions of WordPress users. The problem, spotted by security firm Sucuri, has been identified as a DOM-based Cross-Site Scripting (XSS) vulnerability. If you want to learn more about the technical side of the vulnerability, this is a great resource by Acunetix. The vulnerability relates to the genericon package; specifically the example.html file. Any theme or plugin that uses this example.html file is potentially vulnerable—if any of your themes or plugins utilize vector icons, you could be at risk. Worryingly, this is known to include the TwentyFifteen theme which ships with […]