https://insinuator.net/tags/php/ Recent content in PHP on Insinuator.net - Bold Statements Hugo en-us Wed, 22 Aug 2018 00:00:00 +0000 https://insinuator.net/2018/08/a-few-notes-on-wordpress-security/ Wed, 22 Aug 2018 00:00:00 +0000 https://insinuator.net/2018/08/a-few-notes-on-wordpress-security/ <p>Taking a look at the <a href="https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=wordpress">CVE List for WordPress</a>, most vulnerabilities aren’t found within the WordPress core but inside of third-party plugins and themes.</p> <p>Today, let’s talk about WordPress.</p> <p>Performing a WordPress assessment might seem boring at first as core functionality [tested] and configuration does not allow for extensive security misconfigurations. Luckily, most instances use plugins and themes to add features not offered by the WordPress core.</p> <p>In this blog post I would like to discuss the findings and how I discovered them. Also, I will describe different vendor responsiveness reaching from not responding at all, to not understanding the issue to fast and professional responses kindly asking for a review of the updated code ready for deployment.</p>