WordPress Vulnerability Patch May Temporarily Leave Sites Exposed During Update

A recently disclosed WordPress vulnerability's patch may leave sites vulnerable during the update process due to the continued use of unpatched code. Researchers advise blocking web access to mitigate potential exploitation during this window.

Some WordPress sites can still be attacked while they install the fix for an actively exploited flaw, according to Umut Bayram, the Picus Security researcher who found it.

The update that installs the fix still unpacks its files using the site's old, unpatched code, so an attacker who strikes at the right moment can run code on the server. The researcher advises blocking web access to the

Read original article