WordPress · Report #267075
Clickjacking irclogs.wordpress.org
Informativestatus
2upvotes
12 Oct 2017disclosed
How it was found
Hello! @wordpress security team, I'm Md Sameull Soykot ( @sameull ). Recently I have tested you all sub-domain and got a domain which is vulnerable named as clickjacking. I have attached my video Poc for details. Hope you will fix this issue as soon as possible.
Reference: https://blogs.msdn.microsoft.com/ieinternals/2010/03/30/combating-clickjacking-with-x-frame-options/
{F219474}
Thank you