LABS / PUBLICATIONS
CMS Security
Research, published with evidence and technical context.
CMS Media Timeleaks in Jetpack, WordPress and beyond: A Risky OpSec Issue
The article discusses an operational security issue regarding the image sitemap functionality in Jetpack and WordPress. It reveals that even after redacting sensitive images in posts, the original files may still be…
How We “Stole” a Non-Public CVE: Draft Artifacts as an Attack Surface
Javier Medina’s article explores vulnerabilities in the WordPress ecosystem regarding draft content visibility. He discusses how observing a cybersecurity firm’s draft publishing process led to the discovery of a significant security flaw…