4.7.2 – Site Geeks

WordPress 4.7.2 Update Fixes a Vulnerability Active “In the Wild” – Update Now!

By Site Geek | 9 February 2017

Sites Affected by Just One Version of the Exploit

WordPress 4.7.2 was released on 26 January 2017. This release fixed an unannounced zero-day vulnerability in the WordPress REST API. Yet, thousands of WordPress sites are still vulnerable to this attack. One of the REST endpoints allows remote access to WordPress posts with permission to view, edit, delete, and create new posts. Depending on plugins…