Hacker News new | ask | show | jobs
by givan 78 days ago
Most WordPress plugin vulnerabilities would not exist if Wordpress would expose only a public folder to the web without including `wp-content/plugins/`.

This would avoid plugin scanning and direct plugin code execution.

For the CMS I'm developing, Vvveb CMS, no plugin code is exposed, everything passes through the only exposed php file `public/index.php`