Attacks on WordPress sites which contain the REST API flaw have increased significantly, with 1.5 million pages defaced.<\/p>\n
The WordPress REST API vulnerability allows a remote attacker to craft an HTTP request that pings a REST API endpoint and alters titles and content on the user’s website.<\/p>\n
Exploiting the flaw is trivial\u00a0and according to Sucuri<\/strong><\/a>, a few public exploits have been published online since last week.<\/p>\n \u201cEven if the vulnerability affects only WordPress 4.7.0 and 4.7.1 and the CMS has a built-in auto-update feature for security issues, many websites haven’t been updated,\u201d said Sucuri.<\/p>\n Web security firm WordFence said<\/strong><\/a>\u00a0the latest number of compromised pages stands at 1.5 million – with 20 hacking groups involved in a defacement turf war.<\/p>\n To protect a WordPress site against the attacks, update it to the most recent version (v4.7.2).<\/p>\n Attacks on WordPress sites which contain the REST API flaw have increased significantly, with 1.5 million pages defaced.<\/p>\n","protected":false},"author":23,"featured_media":141744,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[27],"tags":[41266,32820,9647],"class_list":["post-198262","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-security","tag-rest-api","tag-sucuri","tag-wordpress"],"_links":{"self":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts\/198262"}],"collection":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/users\/23"}],"replies":[{"embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/comments?post=198262"}],"version-history":[{"count":1,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts\/198262\/revisions"}],"predecessor-version":[{"id":198290,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts\/198262\/revisions\/198290"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/media\/141744"}],"wp:attachment":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/media?parent=198262"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/categories?post=198262"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/tags?post=198262"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}Now read:\u00a0WordPress security flaw put millions of websites at risk<\/a><\/h3>\n","protected":false},"excerpt":{"rendered":"