A few weeks ago, WordPress released version 4.7.2 to address several security vulnerabilities, including one critical one. This vulnerability allowed a remote, unauthorised attack to update web pages via the REST API. Since then, hundreds of thousands of ... (more…)

From time to time we do forensic investigations of WordPress breakins. When we do the investigation there is often one or more backdoors placed in the filesystem or modified legit WordPress-related files in wp-includes, themes or plugins. This is not only... (more…)

Inspired by Erik Bernhardsson post The half-life of code & the ship of Theseus, here are the results of running Erik’s scripts against the WordPress git repo. Cohorts Code decay over time…

The ins and out of using SQLite with WordPress and when it makes real sense to use SQLite instead of MySQL...

WordPress 4.8.2 is now available. This is a security release for all previous versions and we strongly encourage you to update your sites immediately. WordPress versions 4.8.1 and earlier are affec… (more…)