Just as I released my latest article about the Top 10 Vulnerable WordPress Plugins, a new concern about the security of WordPress powered websites appeared, as if to confirm my previous impressions. SalesForce.com’s security researcher Nir Goldschlager discovered a PHP-level vulnerability that could result in denial of service (DoS) attacks. The exploit in question is a variant of a XML-RPC Entity Expansion (XEE) method, best described as a more effective version of the “Billions Laugh” attack. (more…)

Hey Guys!

Spending the majority of my time online, I often encounter all kinds of “Top N-list of Something-Something” so I decided it was about time to dip my own toes in such type of article. Let’s see how this one takes off 🙂

My natural starting point is yet again WordPress. WordPress’ biggest selling point is, in my humble opinion, the astonishingly huge selection of free plugins available from the WordPress.org repository. While one shouldn’t simply ignore the importance of the WordPress core itself as well as the ease with which one can change up your design with themes, it is plugins that equip us with the ability to achieve just about anything. (more…)

There are so many reasons to love WordPress . From the user-friendly interface to the thousands of widgets, from the enhanced functionality to the vast and helpful community, really there is so much to adore. One thing makes it extra appealing to me tho – the developers seem to love jazz music just as much as I do and they acknowledge that by naming their updates after well-known jazz musicians. WordPress 3.9 is no difference – coming out with code name “Smith” it is a wink to the infamous Jimmy Smith, who was the revolutionary behind the strong use of the organ in jazz. Just like he brought such colorful diversity in music, WordPress 3.9 wants to be the innovator in website building. (more…)