We are excited to bring Transform 2022 back in-person July 19 and virtually July 20 - 28. Join AI and data leaders for insightful talks and exciting networking opportunities. Register today!

Ubiquitous blogging service WordPress has issued a critical security release to fix a vulnerability that could’ve compromised the security of millions of websites.

“WordPress versions 4.2.2 and earlier are affected by a critical cross-site scripting vulnerability, which could allow anonymous users to compromise a site,” explained WordPresser Gary Pendergast in a blog post.

Cross-site scripting, or XSS, is a vulnerability in the code of Web applications that opens up the target (i.e. website) to attacks, and it’s one of the most common conduits used by hackers.

With these vulnerabilities in the code, hackers are able to embed malicious HTML, Flash, JavaScript, and other code to “fool” the user into executing a script on their computer. This can lead to the collection of user data, including cookies stored on the machine.


Transform 2022

Join us at the leading event on applied AI for enterprise business and technology decision makers in-person July 19 and virtually from July 20-28.

Register Here

The good news is, a WordPress user reported the vulnerability privately, allowing the community to fix the issue without it becoming public knowledge. However, the fix does require users to upgrade to version 4.2.3, which is easy enough to do from within the main WordPress dashboard.

WordPress has also taken this opportunity to introduce a handful of other bug fixes.

VentureBeat's mission is to be a digital town square for technical decision-makers to gain knowledge about transformative enterprise technology and transact. Learn more about membership.