WordPress 5.2.4 Update

Read Time:29 Second

Late-breaking news on the 5.2.4 short-cycle security release that landed October 14. When we released the news post, I inadvertently missed giving props to Simon Scannell of RIPS Technologies for finding and disclosing an issue where path traversal can lead to remote code execution.

Simon has done a great deal of work on the WordPress project, and failing to mention his contributions is a huge oversight on our end.

Thank you to all of the reporters for privately disclosing vulnerabilities, which gave us time to fix them before WordPress sites could be attacked.

Cloudflare Introduces E2E Post-Quantum Cryptography Protections

UK’s Online Safety Act: Ofcom Can Now Issue Sanctions

Researchers Confirm BlackLock as Eldorado Rebrand

Improvements in Brute Force Attacks

US Legislators Demand Transparency in Apple’s UK Backdoor Court Fight

£1M Lost as UK Social Media and Email Account Hacks Skyrocket

Security Database Aims to Empower Non-Profits

Tj-actions Supply Chain Attack Exposes 23,000 Organizations

Free file converter malware scam “rampant” claims FBI

rust-zincati-0.0.30-1.fc40

rust-zincati-0.0.30-1.fc41

rust-zincati-0.0.30-1.fc42

bluez-5.80-1.fc42 iwd-3.4-1.fc42 libell-0.74-1.fc42

dotnet9.0-9.0.104-1.fc40

dotnet9.0-9.0.104-1.fc41