Loading
Loading
We use strictly necessary cookies to run this site, and analytics cookies to understand how it's used. See our Privacy Policy for details.
A fresh WordPress install can do almost nothing on its own beyond publishing basic posts and pages.
Summary
Everything that makes a site actually usable, protected from attacks, fast to load, findable on Google, backed up against disaster, comes from plugins, and the WordPress plugin directory holds tens of thousands of them. Most beginners either install far too many or freeze up entirely trying to figure out where to start.
This is a brief wire summary — the full story (linked below) has the complete details.
KazaSec's take
Web and API vulnerabilities like this are exactly what manual penetration testing is designed to catch — automated scanners routinely miss the logic flaws and chained issues that cause the most damage in practice.
Coverage details
Related security advisories
Relevant from KazaSec
More security news
We help organizations find and fix the gaps before they make headlines.