|
|
|
|
|
by givan
78 days ago
|
|
Most WordPress plugin vulnerabilities would not exist if Wordpress would expose only a public folder to the web without including `wp-content/plugins/`. This would avoid plugin scanning and direct plugin code execution. For the CMS I'm developing, Vvveb CMS, no plugin code is exposed, everything passes through the only exposed php file `public/index.php` |
|