How to find more than 150 vulnerabilities in WordPress plugins installed on 15 million websites
WordPress is the most popular open-source content management system. It can be extended with almost 60,000 plugins providing various features specified as online stores, forms, analytics, or image galleries. During the talk, I will present a method to discover multiple fresh vulnerabilities in the plugins. I will show an open-source tool that implements this method, share the most interesting (or funny) vulnerabilities I have found, and describe how the framework could make it easier to compose safe plugin code.
Website: https://confidence-conference.org
Facebook: https://www.facebook.com/confidence.conference
Twitter: https://twitter.com/confidenceconf





![Robert Kruczek, Kamil Szczurowski - [PL] How we hacked half of the Polish government](https://i1.ytimg.com/vi/JCoZrd31EfQ/maxresdefault.jpg)

![Jarosław Wacko - [PL] Cyber Legion - od społeczności do cyberobrony państwa](https://i1.ytimg.com/vi/lVbcwDOH78Q/maxresdefault.jpg)

