logoalt Hacker News

dcrazyyesterday at 7:56 PM2 repliesview on HN

Aren’t WP exploits valuable for watering hole attacks?


Replies

strictneinyesterday at 8:09 PM

You don't need an RCE for that though. There's a lot of vulnerable plugins deployed everywhere.

show 1 reply
illliillllyesterday at 8:48 PM

You already owned the WordPress admin with your browser 0day, you don’t care if WordPress is secure or not.