Search for a command to run...
Articles tagged with #drupal-cms
Review of Four Kitchens-style CMS dashboard design patterns, translated into practical admin UX improvements for Drupal 10/11, Drupal CMS, and WordPress editorial workflows.
An impact map for Drupal 10.4.x teams migrating to Drupal 11 — which change records cause real risk, how to sequence deprecated APIs and config actions, and why WordPress teams should compare their own major-version upgrade playbooks.
Review of Drupal SA-CONTRIB-2026-018: critical reflected XSS on SAML SSO login endpoints. WordPress sites using miniOrange or other SAML plugins face the same authentication-surface XSS risk.
Review of Drupal SA-CONTRIB-2026-015: CAPTCHA token reuse bypass. The same token lifecycle mistake appears in WordPress CAPTCHA plugins — here is how to audit and patch.
Review of Drupal SA-CONTRIB-2026-017: SSRF via a hidden submodule in Drupal Canvas. WordPress sites using AI-integrated plugins face the same hidden dependency risk.
Review of Drupal SA-CONTRIB-2026-016: arbitrary file upload chained with XSS in Islandora. The upload-to-XSS pattern is equally dangerous in WordPress media handling and plugin upload flows.
