Advancing WordPress security through research

At Verpent, publishing security research is a key priority, and this year brought valuable opportunities to contribute to the WordPress security ecosystem. Through in-depth analysis of open-source plugins, several vulnerabilities were identified and disclosed, resulting in multiple CVEs:

For those looking to deepen their expertise in source code review or explore vulnerability research, platforms like Patchstack and WordFence offer valuable insights into plugin security and mitigation strategies. These resources have been instrumental in advancing Wordpress security research and in the background strengthen the safety of the ecosystem.

Researcher profiles

Looking ahead, We aim to expand this research and continue contributing to the security community. Here’s to another year of impactful findings!