I was browsing wpvulndb.com when I stumbled upon the InfiniteWP Client authentication bypass. Being curios, I wanted to reverse engineer the unpublished PoC. Here's my (short) journey. Analysis The first step was to browse through the source code which is... (more…)

Thanks to GraphQL, the WordPress data model gets a facelift... (more…)

This is a post about building custom Wordpress theme with BEM naming methodology. (more…)

Prezentace z přednášky o bezpečnosti na 5. WordPress konferenci. (more…)

What is the biggest lesson you’ve learned after years of selling WordPress plugins or themes? In this episode of Experts Corner, we asked the experts to try ... (more…)