WordPress Updating Attack Vector

  • ticklemeozmo

    (@ticklemeozmo)


    17 years, 1 month ago

    The automated update for WordPress is very handy but has me slightly concerned for boxen which may have a poisoned DNS cache.

    Is there any verification (in terms of DNS correctness or zip file verification) that the update which is downloaded from ww.wp.xz.cn is actually the one from the real ww.wp.xz.cn?

The topic ‘WordPress Updating Attack Vector’ is closed to new replies.