News for hackers. Stuff that matters.
Re:WordPress: Unauthenticated path traversal leading to cond... by dofm on Tuesday September 22, 2026 @01:20PM (#49804816)
Not sure if it’s a couple. Devs routinely make heavily edited copies of the core themes so there will be many, many unpublished themes that use the “page-“ prefix for templates; it was (is?) a reasonably common convention.

(No particular disagreement with the rest of your comment though)

There are no comments on this comment yet.