Comments on: WordPress Cookie Authentication Vulnerability

By: Abel Cheung

Abel Cheung — Mon, 26 Nov 2007 12:13:04 +0000

Daniel, don’t be so easily irritated (I have been, and I regret it). To say that WP has security problem to WP lovers is equivalent to blaspheme their god, so that kind of reaction is actually perfectly normal for them.

Instead, full-disclosure to as large portion of WP users is more important, so that more of them can take preventive measure, that’s more beneficial than spending time upsetting and doing nothing.

By: Entradas en las blogosferas.32 - Carrero Bitácora de los Hermanos Carrero, David Carrero Fernández-Baillo y Jaime Carrero Fernández-Baillo.

Sun, 25 Nov 2007 06:01:41 +0000

[...] Otro error de seguridad en Wordpress. En la Cooki de autentificación. vía: BlogSecurity [...]

By: Daniel

Daniel — Sat, 24 Nov 2007 06:50:42 +0000

The worrying thing is if you read the WP list, they STILL DONT GET IT

http://comox.textdrive.com/pipermail/wp-hackers/2007-November/thread.html#16183

I’ve given up on WP as a blogging platform. Until they take security more seriously, i don’t feel it’s suitable for use

By: Wordpress Cookie Authentication Vulnerability | Aufklarung Journal

Wordpress Cookie Authentication Vulnerability | Aufklarung Journal — Fri, 23 Nov 2007 19:48:08 +0000

[...] Blogsecurity.net menginformasikan bahwa terdapat bugs, baru sialnya Wordpress juga kena, yaitu Wordpress Cookie Authentication Vulnerability, yang memungkinkan seorang attacker ‘tuk mendapatkan akses selevel admin (tanpa menggunakan [...]

By: [Alert] Wordpress Cookie Authentication Vulnerability | Aufklarung Journal

[Alert] Wordpress Cookie Authentication Vulnerability | Aufklarung Journal — Fri, 23 Nov 2007 18:15:06 +0000