https://ExploitBox.io - subscribe to receive the link to source code + full exploit details/writeup :) Stay tuned. Discovered and coded by Dawid Golunski htt... (more…)

At Wordfence, we continually look for security vulnerabilities in the third party plugins and themes that are widely used by the WordPress community. In addition to this research, we regularly examine WordPress core and the related wordpress.org systems. ...

The Logonizer login security plug-in was automatically updated to patch a SQL injection vulnerability. (more…)

I was browsing wpvulndb.com when I stumbled upon the InfiniteWP Client authentication bypass. Being curios, I wanted to reverse engineer the unpublished PoC. Here's my (short) journey. Analysis The first step was to browse through the source code which is... (more…)

Wouldn’t it be great if you could browse, search, and insert photos from your Google account right to your blog posts and pages? Now you can. (more…)