More than one million websites that run on the WordPress content management application run the risk of being completely hijacked by attackers exploiting critical vulnerability in most versions of a plugin called WP-Slimstat. . Versions prior to the recently released Slimstat 3.9.6 contain a readily guessable key that's used to sign data sent to and from visiting end-user computers, according to a blog post published Tuesday by Web security firm Sucuri. The result is a SQL injection vector that can be used to extract highly sensitive data, including encrypted passwords and the encryption keys used to remotely administer websites.. Versions prior to the recently released Slimstat 3.9.6 contain a readily guessable key that's used t. million, websites, wordpress, content, management, application. . LinuxSecurity.com Team
Get the latest Linux and open source security news straight to your inbox.