WordPress says iOS app bug exposed account tokens to third parties

guest · Apr 2, 2019

WordPress says iOS app bug exposed account tokens to third parties
April 2, 2019
https://techcrunch.com/2019/04/02/wordpress-bug-account-tokens/

In an email to customers seen by TechCrunch, the content management giant said it “uncovered an issue with the WordPress iOS application with how it handles security credentials.” The company has disconnected affected accounts from the app “as a precaution.”
The company’s Android app was not affected, nor were self-hosted WordPress installations.

In short, the bug was found in how images were fetched from private WordPress.com sites hosting images by other sites. If a private WordPress.com site had a post or a page with an image hosted on Flickr, for example, the app would send along a WordPress.com account token to Flickr when fetching the image.

“Our engineers discovered this bug in the iOS app and we have no indication it was ever exploited,” said an Automattic spokesperson in an email to TechCrunch. "[...] version 11.9.1 released on March 15, 2019 fixed the issue.”
Click to expand...

Log in or Sign up

WordPress says iOS app bug exposed account tokens to third parties

guest Guest

Log in or Sign up

WordPress says iOS app bug exposed account tokens to third parties

guest Guest

Useful Searches