nonce on {bjørn:johansen} https://bjornjohansen.com/category/nonce/ Recent content in nonce on {bjørn:johansen} Hugo -- 0.118.2 en-US Wed, 22 Mar 2017 15:16:56 +0000 How to perform and mitigate a WordPress session donation attack https://bjornjohansen.com/wordpress-session-donation-attack/ Wed, 22 Mar 2017 15:16:56 +0000 urn:uuid:30626132-3437-5738-b264-633332333961 WordPress doesn’t use a nonce for the login form, which opens up for you to perform a WordPress session donation attack.