Gehaxelt – How WordPress Plugins Leak Sensitive Information Without You Noticing
Sebastian Neef (@gehaxelt) is a IT security freelancer and a top contributor from the Detectify Crowdsource community. In this guest blog, he looks at ways …
Plugins
Improving WordPress plugin security from both attack and defense sides
Paul is a front- & backend developer with a passion in security, who creates designs occasionally. After starting out with WordPress plugin vulnerabilities, he joined …
OWASP TOP 10: Using Components with Known Vulnerabilities
The ninth vulnerability on the list is Using Components with Known Vulnerabilities. This vulnerability type can affect a number of web services using components ranging from operating systems, CMS solutions, plugins, or libraries used by plugins.
IT Security FAQ 2: What should you think about when installing a new plugin on WordPress?
To add different functions to the popular CMS Wordpress – like social media icons or contact forms – it’s usual for people to install and activate different plugins. However, it is important to keep in mind that most security breaches that happen on Wordpress are due to vulnerabilities in these plugins.