{"id":29466,"date":"2016-10-28T18:02:55","date_gmt":"2016-10-28T15:02:55","guid":{"rendered":"https:\/\/blog.superhosting.bg\/en\/?p=29466"},"modified":"2022-01-31T17:39:49","modified_gmt":"2022-01-31T15:39:49","slug":"joomla-patches-critical-core-vulnerabilities","status":"publish","type":"post","link":"https:\/\/blog.superhosting.bg\/en\/joomla-patches-critical-core-vulnerabilities.html","title":{"rendered":"Joomla! Patches Critical Core Vulnerabilities"},"content":{"rendered":"<p>Two days ago Joomla! security team released a patch that fixes two critical core vulnerabilities. The officially announced CVE vulnerability IDs are: CVE-2016-8870 and CVE-2016-8869.<\/p>\n<p>CVE-2016-8870 enables exploiting user registration even when this option has been disabled.<\/p>\n<p>CVE-2016-8869 is even more severe since it allows unauthorized third parties to register administrator accounts.<\/p>\n<p>The combination of the two vulnerabilities may fully compromise the website which automatically classifies them as the most critical security flaws.<\/p>\n<p>The vulnerabilities are affecting a wide range of Joomla! versions: starting from <strong>3.4.4<\/strong> to <strong>3.6.3<\/strong>.<\/p>\n<div style=\"background: none repeat scroll 0% 0% #ddeef9; padding: 10px; margin: 1px;\">We applied defense system <strong>to our entire infrastructure<\/strong> that will prevent any security breach even if you have not updated to the latest Joomla! version.<\/div>\n<p>However, we strongly recommend that all of the second most popular CMS users update to the latest version as soon as possible!<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Two days ago Joomla! security team released a patch that fixes two critical core vulnerabilities. We applied defense system to our entire infrastructure.<\/p>\n","protected":false},"author":7,"featured_media":29446,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"_lmt_disableupdate":"","_lmt_disable":"","footnotes":""},"categories":[110],"tags":[223,136],"class_list":{"0":"post-29466","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-superhosting-technology-en","8":"tag-joomla-en","9":"tag-security-system"},"aioseo_notices":[],"modified_by":"\u041c\u0430\u0434\u043b\u0435\u043d\u0430 \u041c\u0435\u0442\u043e\u0434\u0438\u0435\u0432\u0430","post_mailing_queue_ids":[],"_links":{"self":[{"href":"https:\/\/blog.superhosting.bg\/en\/wp-json\/wp\/v2\/posts\/29466","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.superhosting.bg\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.superhosting.bg\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.superhosting.bg\/en\/wp-json\/wp\/v2\/users\/7"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.superhosting.bg\/en\/wp-json\/wp\/v2\/comments?post=29466"}],"version-history":[{"count":2,"href":"https:\/\/blog.superhosting.bg\/en\/wp-json\/wp\/v2\/posts\/29466\/revisions"}],"predecessor-version":[{"id":62520,"href":"https:\/\/blog.superhosting.bg\/en\/wp-json\/wp\/v2\/posts\/29466\/revisions\/62520"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/blog.superhosting.bg\/en\/wp-json\/wp\/v2\/media\/29446"}],"wp:attachment":[{"href":"https:\/\/blog.superhosting.bg\/en\/wp-json\/wp\/v2\/media?parent=29466"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.superhosting.bg\/en\/wp-json\/wp\/v2\/categories?post=29466"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.superhosting.bg\/en\/wp-json\/wp\/v2\/tags?post=29466"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}