News for hackers. Stuff that matters.

A comment on Finding an authorization bypass on my own website. Parent comment

Re:Finding an authorization bypass on my own website by tyingq on Saturday March 05, 2022 @08:57PM (#30574244)
Wordpress also has faked parameterized queries.

https://github.com/WordPress/WordPress/blob/4ae0744585ea9417...

They do seem to have resisted attacks for quite a while though.

[ Parent | on HN ]
Re:Finding an authorization bypass on my own website by jolux on Saturday March 05, 2022 @09:19PM (#30574390)
Reading WordPress internals like this makes me feel inclined not to use it.
[ Parent | on HN ]
Re:Finding an authorization bypass on my own website by SahAssar on Sunday March 06, 2022 @04:47AM (#30576305)
Hasn't WP had multiple SQL injection CVE's? WP is famously terrible at security.
[ Parent | on HN ]