TheSammie retweeted
As a big 'monitor the situation' guy, there are currently way too many situations to monitor.
TheSammie retweeted
a lot of people speak with the kind of confidence you can only get by never having done or having to do the work
I don't understand this discourse! Imagine what an expert can do with the same tools that a beginner can achieve much with. That's where the plot is. Senior and experienced devs haven't lost anything, they have gained more . AI isn't exclusive to beginners.
programmers who spent years learning to code before ai
how does it feel watching a beginner build in minutes
5
220
You break in, backup and then leave your name and contact on it and show them you are not a joking subject.
Those who think I'm joking, at the time of posting this, the UCC website (Wordpress) is using the following plugins versions:
Elementor Pro 3.14.1 unless updated but has this CVE-2026-32475 vulnerability that lets someone who isn’t logged in upload a file and run code on the server. It is rated 9.8
Ultimate Addons for Elementor 1.36.19 with two high-severity (8.8) flaws that let a user give themselves more access: CVE-2023-50890 affecting versions ≤1.36.20 and CVE-2024-37455 (≤1.36.31).
Fluent Forms 5.2.9. It’s affected by many bugs including a 7.2-rated flaw that lets visitors who aren’t logged in plant malicious scripts (≤6.2.11), IP-spoofing bug (≤5.2.12).
Custom Twitter Feeds 2.2.5. A 7.2-rated flaw lets visitors who aren’t logged in plant malicious scripts in versions up to 2.5.4; it’s fixed in 2.5.5 but UCC is at 2.2.5
Elementor Custom Skin 3.1.9. Versions before 4.3.8 let visitors who aren’t logged in see private content.
One Click Accessibility. This plugin is now called Ally. Ally ≤4.0.3 has a SQL injection flaw that works without logging in.
I found these in just less than 20 minutes of research, imagine what a hacker can find in months of trying to break in.
Wordpress isn't the problem, the issue is installing plugins left and right. Most plugins have flaws discovered almost every month and it becomes a race.
1
106
You Hijack and show them!
Apparently UCC's website was built on wordpress till today, yet they have all this budget.
I have inspected it and damn!!! It's so embarrassing, many plugins and themes with vulnerabilities.
You can literally hijack the website.
@UCC_ED we need to do better otherwise this website can be taken down by a hacker.
Thanks.
Concerned citizen.
Ohh and @AnthropicAI setting a 1-year expiration date on Claude prepaid credits is absolute nonsense. It's literally my money sitting in a wallet. If I don't use it all, it shouldn't just vanish into thin air after 365 days.
1
22
TheSammie retweeted
Replying to @Midewontmiss
I am both amazed and impressed by your passion and dedication to your current level of understanding.




















