WP <= 6.1.1 – Unauthenticated Blind SSRF via DNS Rebinding
On my website, fluentreport.com, we encounter a security concern called "WP <= 6.1.1 – Unauthenticated Blind SSRF via DNS Rebinding" in WordPress version 6.1.1. This vulnerability enables an attacker to carry out a blind Server-Side Request Forgery (SSRF) attack utilizing DNS rebinding techniques, allowing them to access internal systems or services typically secured from external access. Can you please provide me with possible solutions to address this issue? Thank you.
I checked the WordPress index.php and found a bunch of jargon code inside.
The .htacess, index.php, was infected. I can't edit or delete them because they keep appearing repeatedly.
Related questions 0 DNS rebinding: how it works? 84 Multiple GitHub Pages and custom domains via DNS 0 How to defend Apache2 from anti DNS pinning and anti DNS rebinding? Related questions 0 DNS rebinding: how it works? 84 Multiple GitHub Pages and custom domains via DNS 0 How to defend Apache2 from anti DNS pinning and anti DNS rebinding? 0 how to build Anti DNS Pinning (DNS rebinding) defence using Spring Security? 105 How to configure heroku application DNS to Godaddy Domain? 121 How to make Java honor the DNS Caching Timeout? Load 3 more related questions Show fewer related questions Reset to default
