Offensive Security PEN-200 OSCP Course Giveaway
It all started on June 16th 2011 with a blog post: That’s right! June 16th this year, 2021, marks our 10th birthday! 🥳 To celebrate we want to give something special back to the security…
Category: WPScan
WordPress 5.7.1 Security and Maintenance Release
Today, April 15th, 2021, WordPress released version 5.7.1, a security and maintenance release that reportedly patches two security vulnerabilities. The WordPress release announcement lists the following two security vulnerabilities as being patched in version 5.7.1:…
Zerodium Offers $300,000 for WordPress Exploits
Zerodium, a company that buys security exploits to then resell to government entities, tripled its price for WordPress Remote Command Execution (RCE) exploits. In a tweet sent out on Friday, April 9th, Zerodium announced that…
Covid Test Centres Leak Personal Information via WordPress API
Over 14,000 covid test patients were affected by a data leak in Germany this week. This was due to the testing centre software using incremental identifiers in their custom WordPress REST API endpoint. According to…
WooCommerce Customers Manager WordPress Plugin – Multiple Security Vulnerabilities
Introduction A member of the WPScan research team discovered two security vulnerabilities within the premium WooCommerce Customers Manager WordPress plugin, versions less than 26.6. The following two vulnerabilities were identified and added to our WordPress…
WordPress Configuration File Backups
What are Configuration File Backups? WordPress has a special file named wp-config.php that stores sensitive configuration information for your website. By default, the wp-config.php file stores the following information: MySQL settings Secret keys Database table…
WordPress Secret Keys
What are WordPress Secret Keys? WordPress secret keys are random long bits of text that are stored in the wp-config.php file. They help with encrypting and hashing important data within WordPress. They are used to…
WordPress SSL/TLS HTTPS Encryption
What is SSL/TLS HTTPS Encryption? Not so long ago the web’s communications were mostly un-encrypted, allowing anyone who could eavesdrop on the traffic to read them. In recent years, the web has seen a dramatic…
WordPress Debug Log Files
What are debug log files? When WordPress developers are working on coding a theme or plugin, it is often useful for them to log important data to a file, such as error messages, so that…
WordPress Debug Log Files
What are debug log files? When WordPress developers are working on coding a theme or plugin, it is often useful for them to log important data to a file, such as error messages, so that…