HexBrain

WordPress · Report #267075

Clickjacking irclogs.wordpress.org

Informativestatus
2upvotes
12 Oct 2017disclosed

How it was found

Hello! @wordpress security team, I'm Md Sameull Soykot ( @sameull ). Recently I have tested you all sub-domain and got a domain which is vulnerable named as clickjacking. I have attached my video Poc for details. Hope you will fix this issue as soon as possible.

Reference: https://blogs.msdn.microsoft.com/ieinternals/2010/03/30/combating-clickjacking-with-x-frame-options/

{F219474}

Thank you

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original