The Support Forums will be in read-only mode for a scheduled maintenance window on 01 September 2016 14:00 UTC - 20:00 UTC. More information.

WordPress Updating Attack Vector (1 post)

  1. ticklemeozmo
    Posted 7 years ago #

    The automated update for WordPress is very handy but has me slightly concerned for boxen which may have a poisoned DNS cache.

    Is there any verification (in terms of DNS correctness or zip file verification) that the update which is downloaded from wordpress.org is actually the one from the real wordpress.org?

Topic Closed

This topic has been closed to new replies.

About this Topic