WordPress Updates – Site Geeks

WordPress 4.7.3 Update Fixes Several Cross-Site Scripting Vulnerability – Update Now!

By Site Geek | 9 March 2017

WordPress 4.7.3 was released on 6 March 2017. This release fixed several cross-site scripting (XSS) vulnerability as well as implementing 39 maintenance/bug fixes. Update your WordPress sites immediately (after backing up the files and database).

WordPress 4.7.2 Update Fixes a Vulnerability Active “In the Wild” – Update Now!

By Site Geek | 9 February 2017

Sites Affected by Just One Version of the Exploit

WordPress 4.7.2 was released on 26 January 2017. This release fixed an unannounced zero-day vulnerability in the WordPress REST API. Yet, thousands of WordPress sites are still vulnerable to this attack. One of the REST endpoints allows remote access to WordPress posts with permission to view, edit, delete, and create new posts. Depending on plugins…