https://blogs.damiendye.uk/en/tags/wordpress/ Recent content in Wordpress on Damien Dye's Blog Hugo en-GB Fri, 23 Oct 2026 17:15:00 +0100 https://blogs.damiendye.uk/en/security/a-static-site-has-nothing-to-break-into/ Fri, 23 Oct 2026 17:15:00 +0100 https://blogs.damiendye.uk/en/security/a-static-site-has-nothing-to-break-into/ This blog is built with Hugo and served as plain files with no code running. A stock WordPress 7.1.3, measured in a lab: 133 REST routes, 80 XML-RPC methods, 1,514 PHP files, every file writable by the web user. How Hugo builds, where the risk moves to the build, the CPU and disk to serve 10,000 pages, and how to build offline, once. https://blogs.damiendye.uk/en/security/php-twenty-nine-years-of-leaving-the-door-open/ Fri, 23 Oct 2026 16:00:00 +0100 https://blogs.damiendye.uk/en/security/php-twenty-nine-years-of-leaving-the-door-open/ PHP2Shell, disclosed 21st October 2026, is a memory-safety RCE in every PHP back to 5.4. 757 interpreter CVEs from NVD, the C engine, type juggling, WordPress, web shells, the php.net breaches, half of PHP sites on unsupported versions, the one-process deployment that turns every bug into the lot, and why to leave it for Go or Rust.