Issue 151: WordPress 5.8.1 security patch, API botnet attacks report, articles on API tokens and API discovery
Brief
This week, we have details on the security patch in WordPress 5.
- 1 fixing an issue on the REST API, a report on the rise of botnet attacks on APIs, an article on everything you need to know about API tokens, and thoughts on API discovery.
Vulnerability: Security patch to REST API in WordPress 5.
- 1
Last Friday saw a security and maintenance release for WordPress, with the details of version 5.
- 1 available here . This release features 60 bug fixes and — most importantly — three security fixes, namely:
- A data exposure vulnerability within the WordPress REST API
- An XSS vulnerability in the block editor
- Lodash library updated to version 4.17.21 to incorporate upstream security fixes
Of interest to us is the vulnerability related to the WordPress REST API, detailed more fully in CVE-2021-39200 .