WordPress Version 4.5.2 Patches SOME and XSS Flaws
WordPress has already released three security updates this year bringing the current version 4.5.2. WordPress also turned on free encryption for custom domains hosted on the platform. In an advisory published late last week, WordPress said the Plupload third-party file-upload library was plagued by a SOME vulnerability. SOME flaws are Same Origin Method Execution bugs where JSON callbacks are abused and lead to similar problems as cross-site scripting attacks. Researcher Ben Hayak presented on SOME flaws at Black Hat Europe two years ago and he provides some technical details in a blog post. Continue reading this story here.