WordPress Core Vunerabilities

• 

  toprobroy · Member · May 22, 2023 at 8:05 am

  • Copy link
  • Add topic to favorites

  Online security on servers running WordPress, continue to report this vulnerability which has been around for more recent versions including the latest:

  WordPress core <= 6.2.1 – Unauth. Shortcode Execution vulnerability

  Has WordPress not got a solution to this as I can't find how to fix it and I'm surprised WordPress hasn't produced a solution to prevent this message coming from servers?

  Thanks

  The blog I need help with is: (visible only to logged in users)

• 

  staartmees · Member · May 22, 2023 at 8:37 am

  • Copy link

  This is not a wordpress.com issue but is about the open source wordpress.org version 6.2.1 and lower. This has already been solved by WordPress 6.2.2 which was released on May 20th, https://wptavern.com/wordpress-6-2-2-restores-shortcode-support-in-block-templates-fixes-security-issue

• 

  toprobroy · Member · May 22, 2023 at 9:54 am

  • Copy link

  Thanks for that information. I’m off to updates a few sites and hoping this will be fixed then.