Wordpress blogs defaced in hack attacks

A security flaw in the WordPress blogging software has let hackers attack and deface tens of thousands of sites.

One estimate suggests more than 1.5 million pages on blogs have been defaced.

The security firm that found the vulnerability said some hackers were now trying to use it to take over sites rather than just spoil pages.

WordPress urged site owners to update software to avoid falling victim.
Feeding frenzy

The vulnerability is found in an add-on for the WordPress blogging software that was introduced in versions released at the end of 2016.

Security firm Sucuri found the "severe" bug and informed WordPress about it on 20 January.

In a blogpost, WordPress said it delayed going public about the flaw so it could prompt hosting firms to update their software to a fixed version. (BBC).*