CONNECT WITH US
eCommerce

eCommerce

We went looking: What Woo has done about security since June

WooCommerce logo

Published on

Add as a preferred source on Google
We went looking: What Woo has done about security since June

If you run a WooCommerce store, or build for people who do, you’ve seen many security updates from us over the last few months: core patch releases, extension updates, and a PHP advisory. I want to explain why that’s happening, what we’ve been doing, and why I think the result is a stronger platform. 

In short: AI tools have made finding vulnerabilities much easier, for everyone. Researchers are pointing them at our code, but more importantly, so are we. We chose to go looking, and a wave of fixes is keeping WooCommerce a secure platform for your commerce needs.

The rest of this post covers what changed, what we’ve put in place since June, how fixes reach your store now, and what you should do next. If you just want the checklist, skip to What to do now.

Security has always been important to us at WooCommerce (and our parent company Automattic). Besides maintaining a bounty program via Hacker One, at various points in previous years we’ve also done our own internal security-focused research through the codebase to find and fix vulnerabilities. It is also an important part of every review our code goes through and we have used tools like PHPCS and PHPStan to help with static review around best practices for secure websites.

However, for anyone following the changes AI is bringing to the tech industry, you understand the impact LLM intelligence is having on the security of every piece of software. Over the last year, reports about Woo products through Automattic’s HackerOne program increased roughly nine times.


Source link
Related Topics:eCommerce

Disclaimer

We strive to uphold the highest ethical standards in all of our reporting and coverage. We TheMorningPulse.fyi want to be transparent with our readers about any potential conflicts of interest that may arise in our work. It's possible that some of the investors we feature may have connections to other businesses, including competitors or companies we write about. However, we want to assure our readers that this will not have any impact on the integrity or impartiality of our reporting. We are committed to delivering accurate, unbiased news and information to our audience, and we will continue to uphold our ethics and principles in all of our work. Thank you for your trust and support.