WordPress and the Blank Target Vulnerability

https://perishablepress.com/wordpress-blank-target-vulnerability/ For those who haven’t yet noticed, WordPress now adds rel=”noopener” attributes for any external links added via the link Quicktag in the Visual/RTE. So if you enable the option, “Open link in a new tab”, WordPress automatically will add the rel noopener attribute to the link. This is to protect against CORS and other […] More info: https://perishablepress.com/wordpress-blank-target-vulnerability/

Blocking the “ReallyLongRequest” Bandit

https://perishablepress.com/blocking-reallylongrequest-bandit/ While browsing server logs, I kept seeing these super long request URIs that begin with “YesThisIsAReallyLongRequest…” and then the request string just keeps going for like 1 kilobyte worth of characters. Not just a few times, but many. In other words, somebody is going around and repeatedly hitting servers with gigantic-size requests. Probably to […] More info: https://perishablepress.com/blocking-reallylongrequest-bandit/

An Extensive Plan of Action for WordPress Security

https://pagely.com/blog/wordpress-security-action-plan/There’s no nice way to put this, so I’m just going to come out and say it: WordPress websites are prime targets for hackers. It’s not that WordPress itself is […] More info: https://pagely.com/blog/wordpress-security-action-plan/
Translate »