Twitter accounts affected by WordPress security failure

A Wordpress plugin allowed tokens to access Twitter accounts

One of the biggest leaks of e-mail passwords in history occurred a few hours ago. Additionally, one more vulnerability case occurred with Twitter accounts affected by a WordPress plugin failure.

The French security researcher Elliot Anderson published a worrying report in which the access tokens of more than 400 Twitter accounts were compromised. These tokens allowed strangers to remain connected days later without having to enter the password again.

The violation was due to a popular WordPress plugin called Social Network Tabs, which allows feeds from various social networks to be viewed from a WordPress-based portal.

The disadvantage of the vulnerability lies in the specific plugin mentioned, which allows anyone to find the tokens within their source code. That is, granting access to strangers to enter the Twitter account of another user.

L.Sáenz

Source: Fayer Wayer

Receive this and all our information directly on your cell phone through our channel on Telegram:https://t.me/BitFinanceNews

You might also like