It's a Jungle Out There: The Security State of CMS Platforms
summary
Examines security weaknesses in CMS platforms (explicitly citing WordPress plugins) by reporting research findings (e.g., 20% of top 50 WordPress plugins vulnerable) and comparing risk across other CMS deployments. Covers where CMSs are used inside organizations, common web-attack exposures, and recommended best practices to secure CMS-based sites.
AI-written summary · about
chapters (16)
- 0:00Introduction
- 1:37Types of CMS
- 2:05Structure of CMS
- 2:27Plugin Repository
- 2:42Drupal Architecture
- 3:01Scanning WordPress Plugins
- 3:18Barriers to Entry
- 4:00Jetpack
- 4:24WordPress
- 5:54WordPress Vulnerabilities
- 8:29Shopping Cart
- 8:40Scene Slimstat
- 9:23Akamai Report
- 10:27Attack Anatomy
- 11:15Targeted Attack
- 11:58What Should You Do
related talks
36mHow the WordPress Ecosystem Handles Security and What You Can Learn from It
27mSecuring your WordPress sites
32mState of the CMS
52mDemystifying Front-End Security
31mHey, You Have a Problem: On the Feasibility of Large-Scale Web Vulnerability
33mThe Anatomy of a Hack 24 Hours in the DevSecOps ER
41m"SIWECOS - CMS security sponsored by the German government"
43mI Had WordPress, but It Got Hacked