2
Wordfence is Claiming It Is a Critical Vulnerability for WordPress Administrators to Upload Arbitrary Files
(www.pluginvulnerabilities.com)
1
WPScan Still Isn't Making Sure That "Fixed" WordPress Plugin Vulnerabilities Have Actually Been Fixed
(www.pluginvulnerabilities.com)
1
The Right Way for WordPress Plugins to Secure Order By Clauses in SQL Statements
(www.pluginvulnerabilities.com)
2
WordPress Plugin Developers Need to Make Sure There Nonce Checks Both Work if a Nonce Isn't Sent or if the Nonce is Wrong
(www.pluginvulnerabilities.com)
1
The WordPress Function maybe_unserialize() Won't Prevent PHP Object Injection
(www.pluginvulnerabilities.com)
2
Many CVE Records Are Listing the Wrong Versions of Software as Being Affected
(www.pluginvulnerabilities.com)
5
Eight Months In, Really Simple SSL's Plugin Vulnerability Data is Claiming That Unfixed Vulnerabilities Have Been Fixed
(www.pluginvulnerabilities.com)
3
Malcare's Review of Wordfence Recommends Malcare Instead Without Disclosing They Make It
(www.pluginvulnerabilities.com)