YAWV - Jan 2022 edition

vyas

Yet another WordPress vulnerability

https://www.searchenginejournal.com/wordpress-core-vulnerabilities/432042/

Rather sketchy details on nature of exploit, or the severity of threat.

Ganonk

no one is reserved first comment.

Congrats for me!

user123

@Ganonk said:
no one is reserved first comment.

Congrats for me!

Yeah? Well #2 is...twice as good as #1. So, there!

vyas

Happy Sunday

And remember to update to wp 5.8.3

Mason

Sigh....

vyas

@Mason said:
Sigh....

The man must have developed a sore back but some super strong thighs after squatting and jumping for 10 hours.

Mason

@vyas said:

@Mason said:
Sigh....

The man must have developed a sore back but some super strong thighs after squatting and jumping for 10 hours.

Never skip leg day.

yoursunny

@Mason said:
Never skip leg day.

Heavy Iron Stuff , my leg day stories.
yoursunny blog is proudly NOT powered by WordPress so that it cannot be hacked.

https://twitter.com/yoursunny/status/830111560588738560

Mason

@yoursunny said: yoursunny blog is proudly NOT powered by WordPress so that it cannot be hacked.

Bold of you to assume that I won't send nanobots to hack your brain.

bikegremlin

@yoursunny said:

it cannot be hacked.

Going up against "the dragon must be asleep" in the finals of the Famous Last Words competition...

yoursunny

@bikegremlin said:

@yoursunny said:

it cannot be hacked.

Going up against "the dragon must be asleep" in the finals of the Famous Last Words competition...

yoursunny blog is a bunch of static files, hence it cannot be hacked.

Someone caught a local file inclusion vulnerability last year in /m/imgproxy.php.
However, that file is not part of the blog.