WordPress mit Sicherheitslücke

Administratorrechte kann eine Nutzer in WordPress übernehmen, wenn dieser Javascript-Code mittels eines Kommentars auf der Seite unterbringt. Bisher wurde die Sicherheitslücke, trotz Hinweise von Spezialisten, nicht von WordPress geschlossen. Betroffen ist hiervon die Versionen 4.1, jedoch konnte das Problem auch bei vorherigen Versionen simuliert werden.

Mehr zum Thema finden Sie hier: http://www.golem.de

Back

This website uses cookies. Those have two functions: On the one hand they are providing basic functionality for this website. On the other hand they allow us to improve our content for you by saving and analyzing anonymized user data. You can redraw your consent to to using these cookies at any time. Find more information regarding cookies on our Data Protection Declaration and regarding us on the Imprint.

Gruppe Mandatory zustimmen

These cookies are needed for a smooth operation of our website.

Name	Purpose	Lifetime	Type	Provider
`CookieConsent`	Saves your consent to using cookies.	1 year	HTML	Website
`fe_typo_user`	Assigns your browser to a session on the server.	session	HTTP	Website
`PHPSESSID`	Temporary cookies which is required by PHP to temporarily store data.	session	HTTP	Website
`__cfduid`	missing translation: trackingobject.__cfduid.desc	30 missing translation: duration.days-session	HTTP	Cloudflare/ report-uri.com

Gruppe Statistics zustimmen

With the help of these statistics cookies we check how visitors interact with our website. The information is collected anonymously.

Name	Purpose	Lifetime	Type	Provider
`_pk_id`	Used to store a few details about the user such as the unique visitor ID.	13 months	HTML	Matomo
`_pk_ref`	Used to store the attribution information, the referrer initially used to visit the website.	6 months	HTML	Matomo
`_pk_ses`	Short lived cookie used to temporarily store data for the visit.	30 minutes	HTML	Matomo
`_pk_cvar`	Short lived cookie used to temporarily store data for the visit.	30 minutes	HTML	Matomo
`MATOMO_SESSID`	Temporary cookies which is set when the Matomo Out-out is used.	session	HTTP	Matomo
`_pk_testcookie`	missing translation: trackingobject._pk_testcookie.desc	session	HTML	Matomo