What dangerous thingy is wp-links-opml.php ?

Allgemein, WordPress General Comments Off on What dangerous thingy is wp-links-opml.php ?

WordPress-SecurityI recently updated WordPress on many customer sites and found something I wasn’t aware of.
There is a new file called wp-links-opml.php and what it is doing?

It is exporting the Links you could create in older WordPress versions and still with this Link Manager Plugin.

It is looking like that.

<opml version="1.0">
  <head>
    <title>Links for WP Plugin Dev</title>
      <dateCreated>Fri, 21 Aug 2015 14:30:22 GMT</dateCreated>
        <!-- generator="WordPress/4.3" -->
   </head>

<body>
<outline type="category" title="all"><outline text="We rock!" type="link" xmlUrl="" htmlUrl="https://wp-plugin-dev.com" updated=""/></outline>
</body>
</opml>

The most crazy part is, it is working on https://anyblogon.wordpress.com/wp-links-opml.php.

So is this a security issue or the next step to semantic web?

Share