Reply to post: And...

WordPress fixed god-mode zero day without disclosing the problem

Tim Brown 1

And...

If you think the API is a good idea, just append

/wp-json/wp/v2/users

to any Wordpress blog base URL running 4.7 or greater and see the some of the information it's happy to offer up by default without any authorisation.

POST COMMENT House rules

Not a member of The Register? Create a new account here.

  • Enter your comment

  • Add an icon

Anonymous cowards cannot choose their icon

Biting the hand that feeds IT © 1998–2021