WordPress.org

Ready to get started?Download WordPress

Forums

WordPress Updating Attack Vector (1 post)

  1. ticklemeozmo
    Member
    Posted 5 years ago #

    The automated update for WordPress is very handy but has me slightly concerned for boxen which may have a poisoned DNS cache.

    Is there any verification (in terms of DNS correctness or zip file verification) that the update which is downloaded from wordpress.org is actually the one from the real wordpress.org?

Topic Closed

This topic has been closed to new replies.

About this Topic