WPDeeply

Download free plugin

Plugin Security

How to judge, replace and remove WordPress plugins.

73

Guides

All 118 Plugin Security 73 Security Research 69 Vulnerability Types 11 Hardening 10 Security News 7 Malware 5 WordPress Insights 4 RSS

LearnPress SQL Injection to RCE: Lessons for WordPress LMS Sites LMS plugins hold users, progress, payments, certificates, and admin workflows. A SQL injection in that environment can become more than a data leak if chained with privileged actions. Plugin Security 20 Jul 2020, 2 min WooCommerce MySQL REPLACE to RCE: Why Store Plugins Need Fast Patching WooCommerce runs close to money and customer data. Any chain that moves from database manipulation toward code execution should be treated as an emergency, even if exploitation requires… Plugin Security 18 Jul 2020, 2 min WordPress Importer and _wp_attached_file: Why Imports Need Security Review Importers create content and file references from external data. If the importer trusts attachment metadata too much, a migration file can become a security boundary problem. Plugin Security 17 Jul 2020, 2 min