Remote
Jeffro
@Jeffro@wptoots.social
mastodon 4.2.19
I like trains, weather, classic rock music, comedy, and being WYSIWYG. I am the engineer of http://wpmainline.com where I write and talk about WordPress.
0 Followers
0 Following
6 Posts
Joined January 26, 2023
It's Friday. What better way to celebrate than making sure your WordPress sites are updated to 7.0.2 to implement some major security fixes https://wordpress.org/news/2026/07/wordpress-7-0-2-release/
WP Beacon tracks every plugin on wordpress dot org — its authors, committers, and releases — to flag ownership transfers, dormant-then-activated takeovers, and release patterns that match known attacks. https://wpbeacon.io/
Wellp, we used up our last lifeline today. After this, if I don't find stable employment soon, we'll likely lose the house, or I'll need to file for bankruptcy.
So if you have any WordPress work, see any gigs I might be good for, inside or OUTSIDE of WordPress, send em my way
This vulnerability is OMGWTFBBQ level of seriousness. wp2shell is a pre-authentication RCE in WordPress Core. No login, no plugins, no preconditions. An anonymous attacker can hit a stock install and take over the site. The worst WP security vulnerability in a long time. Update!