Tag Archives: threadsafety

WooCommerce Can’t Count Either

In continuation of yesterday’s post about bbPress, I decided to look for a more impactful race condition vulnerability. What’s more impactful on an online business than ecommerce?

WooCommerce is up for the thread-safety test in this post and probably a couple of other to follow.

WooCommerce Can't Count Either

Continue reading



bbPress Can’t Count

In a highly-concurrent high-load environment bbPress will not count the topics and replies correctly. This happens due to several race conditions in the code. While not a critical vulnerability, itโ€™s annoying. I wonder how the dotorg forums keep the numbers accurate? Maybe they donโ€™t and nobody cares ๐Ÿ™‚ but it’s something I’ve been very passionate about – data accuracy and race conditions.

bbPress Can't Count

Continue reading