‹ BackHN Continuity

Thread

WordPress: Unauthenticated path traversal leading to conditional RCE

240 points · 132 comments · vntok

  1. iLoveOncall · · focus · HN ↗
    WordPress really is a piece of garbage software, and if you've ever developed plugins for it it is soooo apparent.

    The documentation is a perfect reflection of the absolute mess of spaghetti code that it is, half of the methods that you will use constantly when developing plugins are undocumented, even untyped. It's literally unusable.

    I know WordPress is good thanks to its ecosystem, but really, really, do NOT use it.

Open on Hacker News to reply ↗

Unofficial Hacker News client; not affiliated with Y Combinator.