Category: Wordpress XSS
08/23/2023
How to recover a hacked WordPress website
Well it happened to you. You receive an email from a customer, or perhaps your web host : Your WordPress site is displaying an “unsafe website” browser error. Or maybe it is now showing some gambling advertisements. It clearly has been compromised. What do you do now? Based on over 14 years experience hosting, managing […]
01/31/2018
How to craft an XSS payload to create an admin user in WordPress
Hello! XSS (or cross site scripting) attacks are a common method to maliciously execute actions against a website installation. In particular this type of attack vector is useful when dealing with a CMS like WordPress where you have administrative user accounts to target. This means that if you are able to craft an XSS payload […]