N/A

WordPress through 6.1.1 depends on unpredictable client visits to cause wp-cron.php execution and the resulting security updates, and the source code describes "the scenario where a site may not receive enough visits to execute scheduled tasks in a timely manner," but neither the installation guide nor the security guide mentions this default behavior, or alerts the user about security risks on installations with very few visits.

N/A

N/A

WordPress 安全漏洞

WordPress是WordPress基金会的一套使用PHP语言开发的博客平台。该平台支持在PHP和MySQL的服务器上架设个人博客网站。 WordPress 6.1.1及以前版本存在安全漏洞，该漏洞源于其wp-cron.php组件功能容易被滥用或仅从常规流量中变成服务器上的攻击媒介。

N/A

N/A