Those who manage a WordPress site should be very careful as a security flaw has been revealed that may affect them.
The security flaw affects the TwentyFifteen theme and Jetpack plugin, for which, according to Engadget, more than 1 million installations have been noted, so many sites are at risk.
The bad news is that with a malicious link, a hacker can gain complete control of a WordPress site. The solution, according to Engadget, is to remove the example.html from the generics of your WordPress installation.
The security flaw was identified by the company Sucuri, which identified the problem in XSS Theme, naming the vulnerability Document Object Model Based XSS, which contains all the information that determines how the titles, headings, and other image elements of a Word Press site will appear.
The bad news is that this bug will not only affect those using the TwentyFifteen theme, but all WordPress users, as the theme is integrated into the WordPress, according to Digital Trends. Hosting services such as GoDaddy and ClickHost have moved to resolve the issue.
