The recently patched REST API Endpoint vulnerability in WordPress could be leveraged to pull off stored cross-site scripting attacks.

The new vulnerability (CVE-2022-0218, CVSS score 8.3) was found by Wordfence researcher Chloe Chamberland, and was caused by a faulty configuration in the REST-API routes used to update the ...

While there are no workarounds to address the REST API vulnerability, Cisco did release free software updates that are available to customers who have purchased a license. The vulnerability affects ...

A recent survey from Postman found that while most companies use REST, GraphQL and others like webhooks, WebSockets, GraphQL, and SOAP are gaining traction. "Authorization flaws in APIs are very ...

A Twitter API vulnerability shipped in June 2021 (and later patched) has come back to haunt the organization. In December, one hacker claimed to have the personal data of 400 million users for ...

Include the REST API version at the base of the URI. RESTful URLs should be lower case. Never waste time figuring out if a RESTful API call failed because the URL included an upper-case letter instead ...