6Scan is warning about a comment posting forgery ?

  • Hi There,

    I had a security issues a few weeks ago, and now have BulletProof Security on my sites, and on a few I also installed 6Scan.

    Last night the sites that had 6Scan all received an email warning of an issue…

    >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
    Wordpress 3.3.1 comment posting forgery
    CSRF vulnerability in WordPress versions under 3.3.1 allows malicious users to make fake posts
    <<<<<<<<<<<<<<<<<<<<<<<<<<<<<

    Is this something I should be concerned about ?
    They won’t provide any further details until you upgrade to their paid version ??

    Is this a real vulnerability ? And if so is it fixed in 3.4 ?

    TIA, Dave

Viewing 16 replies (of 16 total)
Viewing 16 replies (of 16 total)
  • The topic ‘6Scan is warning about a comment posting forgery ?’ is closed to new replies.

Tags