Robert DeVore on Mythryl: “OMG NOT TIMTHUMB 😭😂”

WordPress Plugin Security Is a Joke, and You're the Punchline You push code to 50,000+ sites with zero audits, no threat modeling, and a forehead-slap $_GET echo. Then act shocked when Russian bots ⁠/⁠ bored teens ⁠/⁠ AI scanners pop your DB. robertdevore.com/wordpress-pl... #WordPress #Security

robertdevore.comWordPress Plugin Security Is a Joke, and You’re the Punchline - Robert DeVoreTrigger Warning OK, so, once again we find ourselves in the land of infinite possibilities – and infinite insecurities – called WordPress. A place where anyone, anywhere, at any time can release a plu...

Leon Chevalier

@speedifypress.com

16 May 2025

WordPress plugin security is indeed often a Wild West. And many, many site owners have suffered as a result over the years (who remembers TimThumb?)

Post