Posté par: igor51 le novembre 28, 2016, 13:00:22
The auto-update server had a flaw, now fixed, that would have let anyone add anything to websites, putting 27% of the entire web at risk.
Source: The WordPress megahack that wasn?t (http://feedproxy.google.com/~r/nakedsecurity/~3/L-PaMBYXMyI/)