InfiniteWP Client: the NOSSL signing key has 31 bits of secret

InfiniteWP Client: the NOSSL signing key has 31 bits of secret — recovered live in 291.9 seconds

Summary by Cyber Security News6 Nov 2026, 19:32 CET

About this summary. This is a short excerpt from the description that oss-security published with its article. Cyber Security News did not report or verify the underlying story. Read the original: https://seclists.org/oss-sec/2026/q4/563

Posted by theknell on Nov 06 InfiniteWP Client 1.13.10 — a WordPress management plugin on roughly 200,000 installs — speaks to its management panel through two authentication branches. The strong branch verifies an RSA signature. The other, NOSSL, is selected by the enrolling panel setting one request parameter, on hosts fully capable of RSA.

Read the full article at oss-security →

Source attribution: headline and facts are from oss-security (seclists.org). Summary method: excerpt of the source description. See our source attribution policy.