‹ BackHN Continuity

Thread

WordPress: Unauthenticated path traversal leading to conditional RCE

240 points · 132 comments · vntok

  1. random_savv · · focus · HN ↗
    I am so happy that I asked Codex to rewrite our website as Hugo templates which allowed us to statically host it and get rid of Wordpress. So much stress gone!
    1. woah · · focus · HN ↗
      You can make the most intricate drag and drop admin interfaces to allow the editor to customize everything, and they will still call you to put up every post, so might as well go static
      1. rsolva · · focus · HN ↗
        This! My customers love that they can call and email me to update their websites, not having to remember usernames, passwords and how the publish interface works. Wordpess or static does not really matter in many cases.
Open on Hacker News to reply ↗

Unofficial Hacker News client; not affiliated with Y Combinator.