During an internal audit of the Patreon plugin for WordPress, the Jetpack Scan team found several weak points that would allow someone to take over a website.

These vulnerabilities were disclosed to the plugin authors, who promptly released version 1.7.2, which fixes all of these issues. If you're running an older version of the plugin, please update today!

Read on for all of the technical details. If this goes over your head, don't worry. We offer Jetpack Scan to handle malware scanning and automated upgrades or removal for you.

Continue reading "Vulnerabilities Found in Patreon WordPress plugin"