Post #4360929
2026-08-03 17:43 UTC
installed php-cli and php-curl to get the proof of concept to run and this is what it spit out. I'll have a rule out for this today.
Replies (1)
-
@stiiin@infosec.space 2026-08-03 20:12
@da_667@infosec.exchange "Critically, for many of these security header options, the plugin does not properly enforce sufficient authorization checks before saving." This is why you don't let people run WordPress.