#wordpress
11
2026-10-23
Anton-Barinov/php2shell-patches
B
php2shell (CVE-2026-109618/CVE-2026-109619) emergency patches for old PHP 5.6/7.x/8.0/8.1 — official + community backports, enhanced universal patch keeping file uploads & progress bars. For OpenCart, WordPress, HestiaCP/VestaCP legacy servers. EOL PHP RCE fix.
2026-09-24
ressl/cve-2026-87902-poc
C
PoC for CVE-2026-87902 — unauthenticated path traversal in WordPress page-template resolution (local PHP inclusion, conditional RCE) with a pinned vulnerable lab
2026-10-25
Percivalll/php2shell-wordpress-rce
D
php2shell WordPress RCE proof of concept (PHP 8.3.35 / WordPress 7.1.2)
2026-10-16
Show HN: BookPress, a WordPress core in C/C++ (Live Demo)
unrated
Since ~40% of all websites supposedly still run on WordPress (WP), I thought it might be useful to run it faster. BookPress is about 50% faster than a performance-tuned WP setup with Elementor and WooCommerce. Every time I used WordPress in the past, I got frustrated how slow it was, even with just a few plugins. So I wrote an light-weight C/C++ core and an embeddable PHP engine to run plugins and themes, with most of the WP API surface covered. Try the live demo, including wp-admin! The embeddable PHP runtime that covers most of Zend PHP's features runs 2x slower than Zend, but BookPress is still faster than a performance-tuned WP instance with OPCache, page cache and object caches. BookPress runs alongside a traditional WP installation on Linux arm64 and x86_64. Looking forward to what you all think.
2026-10-15
Show HN: A faster WordPress core written in C/C++ (Live Demo)
unrated
Over the last 20 years, I repeatedly got frustrated with how slow WordPress (WP) is, especially once you stack a few plugins on it. Since 40% or what of all websites still run on WP, I decided [and please don't ask why, I have no idea what drove me] it could be useful to apply my C/C++ performance experience to a brand new from-scratch WP core to save about 50% of infrastructure while simultaneously increasing performance. With agent assisted coding I thought it could actually be doable to build out most of WP' API surface, and it was! (over multiple months) Try the live demo, including wp-admin! It shows WooCommerce + Elementor working, which is remarkable because I had to build an embeddable PHP runtime that covers most of Zend PHP's features for it. Runs 2x slower than Zend, but BookPress is still faster than a performance-tuned WP instance with OPCache, page cache and object caches. I don't mean to replace WP, and am faithfully implementing the API to avoid any divergence or "BookPress" handling in plugins or themes. BookPress is meant to run alongside a PHP WP installation, with a single-command migrate and un-migrate. Looking forward to what you all think.
2026-08-29
pantheon.io
unrated
Drupal and WordPress hosting, automated DevOps, and scalable infrastructure. Free for developers and agencies. No custom domain.
2026-08-29
WPJack
unrated
Set up WordPress on any cloud in less than 5 minutes! The free tier includes 1 server, 2 sites, free SSL certificates, and unlimited cron jobs. No time limits or expirations-your website, your way.