---
id: 3754
title: "Wordpress Plugin Vulnerability Hunting"
source_domain: projectblack.io
source_url: "https://projectblack.io/blog/cve-hunting-at-scale/"
published_at: "2024-08-27 05:01"
tags: ["vulnerability-research", "wordpress", "sast", "cve", "plugins", "semgrep"]
phying_url: "https://phying.com/item/3754"
lang: en
---

# Wordpress Plugin Vulnerability Hunting

## Summary

How 14 CVE-worthy flaws were found in WordPress plugins in three Sunday afternoons: bulk-download plugins via the WordPress API, scan with Semgrep's PHP ruleset, and triage findings in a SQL database.

## Intelligence Metadata

- **Sources:** projectblack.io
- **Published:** 2024-08-27 05:01
- **Original:** https://projectblack.io/blog/cve-hunting-at-scale/
- **Phying News:** https://phying.com/item/3754