Skip to content
All writing
§ TAG 1 post

WordPress

10 min read

Found by Google, not by monitoring — a WordPress zero-day post-mortem

A site was fully compromised for ten days through a WordPress Core zero-day. Nothing the operators did caused it, nothing they had running detected it, and the only reason we could prove the entry vector was two database rows the attacker could not delete.

SecurityIncident ResponseWordPressForensics
Available Q3 · 2 slots

Have a system that needs to hold up? Let’s talk about it.

Tell me what you’re building and where it hurts. I’ll reply within a day with an honest read on whether — and how — I can help.

Book a call boris@szelcsanyi.net