![\"hackerone](\"https:\/\/www.searchgurus.ca\/blog\/wp-content\/uploads\/2017\/05\/hackerone-wordpress.png\")
<\/p>\n<\/p>\n
Today, WordPress.org announced that\u00a0with the latest update (being pushed out now) they will be officially on HackerOne! \u00a0You can read the entire article online here<\/a>.<\/p>\n In a nutshell, it’s a platform for hackers and pen testers to proactively report vulnerabilities to the core team. \u00a0It helps by providing the necessary tools to help improve\u00a0and standardize the way new security threats are reported and handled. \u00a0This is a big step in the right direction.<\/p>\n One of the big benefits of this type of system is that the amount of time necessary to report, confirm, fix and publish will be much less than previously required. \u00a0These new processes will help secure the online community dramatically. \u00a0It’s currently estimated that over 30% of the websites online are now running a version of WordPress.<\/p>\n This has been in the works for\u00a0over a year. \u00a0Tests were conducted on a private (invite only) internal system and the results were amazing.<\/p>\n Today it’s being rolled out to everyone!<\/p>\n What does this really mean? \u00a0Well, if things go as planned, it will mean that the response time to patching vulnerabilities will be decreased meaning we all will be running more secure websites.<\/p>\n Unfortunately not. \u00a0Unless you run your website with zero plugins or widgets outside of the core files, then you risk injecting foreign code that can compromise the entire website.<\/p>\n If your website has been hacked in the past or you are currently dealing with a hacker, this is a big deal. \u00a0This is where “less is more”… \u00a0as in, the less 3rd party apps, plugins and widgets you add, the more secure your website will be.<\/p>\n With this new\u00a0HackerOne program, they are now introducing bug bounties. \u00a0These bug bounties provide money to those who disclose them. \u00a0Let’s be honest,\u00a0when there is money on the table, it becomes easier to part with.<\/p>\n The program and bounties cover all our the WordPress applications\u00a0including WordPress, BuddyPress, bbPress, GlotPress, and WP-CLI as well as all of their\u00a0websites including WordPress.org, bbPress.org, WordCamp.org, BuddyPress.org, and GlotPress.org.<\/p>\n Hopefully this will encourage more disclosure and help the developers provide a more secure application for everyone.<\/p>\n","protected":false},"excerpt":{"rendered":" Today, WordPress.org announced that\u00a0with the latest update (being pushed out now) they will be officially on HackerOne! \u00a0You can read the entire article online here. What is HackerOne? In a nutshell, it’s … Read article<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[29],"tags":[18,19,20],"class_list":["post-136","post","type-post","status-publish","format-standard","hentry","category-seo-fundamentals","tag-hackerone","tag-wordpress","tag-wordpress-seo"],"_links":{"self":[{"href":"https:\/\/www.searchgurus.ca\/blog\/wp-json\/wp\/v2\/posts\/136","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.searchgurus.ca\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.searchgurus.ca\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.searchgurus.ca\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.searchgurus.ca\/blog\/wp-json\/wp\/v2\/comments?post=136"}],"version-history":[{"count":6,"href":"https:\/\/www.searchgurus.ca\/blog\/wp-json\/wp\/v2\/posts\/136\/revisions"}],"predecessor-version":[{"id":143,"href":"https:\/\/www.searchgurus.ca\/blog\/wp-json\/wp\/v2\/posts\/136\/revisions\/143"}],"wp:attachment":[{"href":"https:\/\/www.searchgurus.ca\/blog\/wp-json\/wp\/v2\/media?parent=136"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.searchgurus.ca\/blog\/wp-json\/wp\/v2\/categories?post=136"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.searchgurus.ca\/blog\/wp-json\/wp\/v2\/tags?post=136"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}What is HackerOne?<\/h2>\n
Does this mean I don’t have to worry?<\/h2>\n
Why would a hacker disclose a vulnerability?<\/h3>\n