▮

> booting the archive…

independent analysis of AI, security & Malaysia tech — in English & Bahasa Melayu.

[rss][self-hosting]

// index

archive
topics
tags
search
about
contact

topics //

AI & Machine Learning78
AI Agents & Tool Calling57
Developer Tools & Web40
Cybersecurity & Privacy82
Malaysia Tech21
AI Business & Culture39

SIGNAL STATUS

posts: 143
lang: EN+MS
build: v0.65.0

SIGNAL OK

independent analysis of AI, security & Malaysia tech — in English & Bahasa Melayu.

[privacy][terms][cookies]

▮

> booting the archive…

we use a small set of cookies. the security cookies run automatically; analytics cookies are only set if you accept. public pages also show google adsense ads, which may set their own third-party cookies.

home/tags

[ // tag: #wordpress ] (1)

Elementor CSRF: one link, one new admin account

>26 SEPT 2026decode·7 min

Elementor CSRF: one link, one new admin account

A hidden Elementor experiment let a query string switch off WordPress REST CSRF protection, so one clicked link could mint a new admin. Patched in 4.3.2.

securitycvewordpress

>read more_

▮

> booting the archive…

>_ hejes.my

independent analysis of AI, security & Malaysia tech — in English & Bahasa Melayu.

[rss][self-hosting]

// index

archive
topics
tags
search
about
contact

topics //

AI & Machine Learning78
AI Agents & Tool Calling57
Developer Tools & Web40
Cybersecurity & Privacy82
Malaysia Tech21
AI Business & Culture39

SIGNAL STATUS

posts: 143
lang: EN+MS
build: v0.65.0

SIGNAL OK

independent analysis of AI, security & Malaysia tech — in English & Bahasa Melayu.

[privacy][terms][cookies]

home/tags

[ // tag: #wordpress ] (1)

Elementor CSRF: one link, one new admin account

>26 SEPT 2026decode·7 min

Elementor CSRF: one link, one new admin account

A hidden Elementor experiment let a query string switch off WordPress REST CSRF protection, so one clicked link could mint a new admin. Patched in 4.3.2.

securitycvewordpress

>read more_