4 ms·
WordPress security plugin Hide My WP addresses SQL injection, deactivation flaws
- dpkonofa 5y agoThis isn't the first time I've seen a vulnerability like this and it surprises me that people who make security focused software still have any of their features based on things like headers that are not trustworthy to begin with. If you can fake things like user agents, IPs, hostnames, etc., they shouldn't be relied on for security purposes.