News for hackers. Stuff that matters.

A comment on Things I’d want to see improved in WordPress core. Parent comment

Re:Things I’d want to see improved in WordPress core by dschiffner on Monday May 23, 2022 @04:28PM (#31484425)
his admin creds were probably

admin / abcd123!

[ Parent | on HN ]
Re:Things I’d want to see improved in WordPress core by waynesonfire on Monday May 23, 2022 @04:38PM (#31484501)
Guessing passwords? You don't even have to try that hard. Have you seen the list of WordPress CVEs?

Here is one just from January of this year,

https://www.debian.org/security/2022/dsa-5039

"Several vulnerabilities were discovered in Wordpress, a web blogging tool. They allowed remote attackers to perform SQL injection, run unchecked SQL queries, bypass hardening, or perform Cross-Site Scripting (XSS) attacks."

[ Parent | on HN ]
Re:Things I’d want to see improved in WordPress core by dschiffner on Monday May 23, 2022 @04:56PM (#31484675)
Sure have! Mentioning the admin creds were more so tongue in cheek because there are a lot of folks who use the default 'admin' username.
[ Parent | on HN ]