# Vulnerabilities in WordPress, the Bermuda Triangle — Nestor Angulo de Ugarte

> Three forces that keep most WordPress sites permanently exposed — and how to break the cycle.

Canonical: https://nestorangulo.pro/speaking/vienna-2024-bermuda-triangle/

- Format: Conference Talk
- Event: [WordCamp Vienna 2024](https://vienna.wordcamp.org/2024/session/vulnerabilities-in-wordpress-the-bermuda-triangle/)
- Location: Vienna, Austria
- Date: 2024-04-06 (April 6, 2024)
- Language: English
- Speaker: [Nestor Angulo de Ugarte](https://nestorangulo.pro/about/)
- Themes: Web Security, WordPress Security, Vulnerability Intelligence
- Slides: [View slides (PDF)](https://assets.nestorangulo.pro/slides/vienna-2024-bermuda-triangle-3e02f125e6.pdf)

A hacked WordPress site does not get infected out of thin air. There must be an existing vulnerability that can be exploited, just as a ship does not sink with no reason.

This talk is intended to be a deep dive into the complexities of WordPress security, using real-life examples to illustrate the lifecycle of vulnerabilities and what we can do to prevent them. Our goal is to avoid falling into a ‘Bermuda Triangle’ of security threats, ensuring that our digital ‘ship’ continues its journey safely.

[← All talks](https://nestorangulo.pro/speaking/)