EP16 - WordPress Plugin Dependency Confusion

This month on the Dev Branch we’re going to be talking with Robert Rowley of Patch Stack about Dependency Confusion and what WordPress developers need to know to secure their sites and what’s to think about when building plugins.  https://make.wordpress.org/core/2021/06/29/introducing-update-uri-plugin-header-in-wordpress-5-8/ https://wpscan.com/vulnerability/95e01006-84e4-4e95-b5d7-68ea7b5aa1a8 https://wordpress.org/plugins/patchstack/ https://vavkamil.cz/2021/11/25/wordpress-plugin-confusion-update-can-get-you-pwned/ https://patchstack.com/patchstack-weekly-week-48-dependency-confusion/ https://make.wordpress.org/plugins/2021/11/29/please-dont-test-submitting-other-peoples-plugins/ Panel Jason Tucker – jasontucker.blog Steve Zehngut – zeek.com Jason Cosper – jasoncosper.com Robert Rowley – patchstack.com Show Sponsors WP All Import works with any XML or CSV file, you can import images, and can easily import data to plugin and theme fields or anywhere else you need it. With WP All Import – import and export with ease, even schedule it too!  https://wpallimport.com Are You Looking For Brand Awareness? You could be a show sponsor. Let people know you’re still in business and supporting your products. Supporting podcasts is a great way to repurpose your in-person conference budget. We have been sponsored by big brands such as Kinsta and Cloudways. Why not get your audience in front of the thousands of people who download this show every month? Yes, WPwatercooler has thousands of downloads every month. We’re not just a YouTube Show. http://wpwatercooler.com/sponsor