Note: This post has a detailed follow-up which discusses the identity of the person behind the Display Widgets plugin spam and spam from other plugins. If you have a plugin called “Display Widgets” on your WordPress website, remove it immediately. The las... (more…)
Read more »
Love databases, indexing, and Elasticsearch gymnastics? Greg Brown walks us through the indexing sausage factory on WordPress.com. (more…)
Read more »
"Configuring cloud infrastructures is fun the first time you do it. But it doesn’t take too long before it becomes a tedious time sink. And, if you have the misfortune of being a software developer that has to fight it out with an IT organization, who usu... (more…)
Read more »
Today a severe vulnerability was announced by the WordPress Security Team that allows unauthenticated users to change content on a site using unpatched (below version 4.7.2) WordPress. CC BY-SA 2.0 image by Nicola Sap De Mitri The problem was found by the...
Read more »
Use XSHM to identify WordPress websites running on internal networks and behind firewalls and also launch a login bruteforce attack on them.
Read more »
