Wednesday, July 29, 2020

API Security Weekly: Issue #94

This week, we have a potential username exposure in WordPress APIs, an upcoming API security training at the Black Hat USA 2020 conference, and some industry statistics on the poor security performance of web application firewalls (WAFs) and the importance of API security.

Vulnerability: WordPress

If you use WordPress, check if the REST API endpoint of WordPress is openly sharing usernames at your_domain/wp-json/wp/v2/users.



from DZone.com Feed https://ift.tt/2D3WiD9

No comments:

Post a Comment