{"id":7052,"date":"2026-04-13T13:13:13","date_gmt":"2026-04-13T12:13:13","guid":{"rendered":"https:\/\/europe.wordcamp.org\/2026\/session\/the-hidden-ddos-threat-in-wordpress-abusing-the-search-endpoint\/"},"modified":"2026-06-09T12:31:30","modified_gmt":"2026-06-09T10:31:30","slug":"the-hidden-ddos-threat-in-wordpress-abusing-the-search-endpoint","status":"publish","type":"wcb_session","link":"https:\/\/europe.wordcamp.org\/2026\/session\/the-hidden-ddos-threat-in-wordpress-abusing-the-search-endpoint\/","title":{"rendered":"The hidden DDoS threat in WordPress: abusing the search endpoint"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">Discover how attackers weaponize WordPress native search endpoint for devastating DDoS attacks, while learning practical defense strategies from a cybersecurity perspective. This talk reveals a hidden vulnerability in standard WordPress installations and provides easy solutions.<\/p>\n\n\n\n<figure class=\"wp-block-embed is-type-video is-provider-youtube wp-block-embed-youtube wp-embed-aspect-16-9 wp-has-aspect-ratio\"><div class=\"wp-block-embed__wrapper\">\n<span class=\"embed-youtube\" style=\"text-align:center; display: block;\"><iframe loading=\"lazy\" class=\"youtube-player\" width=\"640\" height=\"360\" src=\"https:\/\/www.youtube.com\/embed\/M6MeFbM0H58?version=3&#038;rel=1&#038;showsearch=0&#038;showinfo=1&#038;iv_load_policy=1&#038;fs=1&#038;hl=en-GB&#038;autohide=2&#038;wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\"><\/iframe><\/span>\n<\/div><\/figure>\n","protected":false},"excerpt":{"rendered":"<p>Discover how attackers weaponize WordPress native search endpoint for devastating DDoS attacks, while learning practical defense strategies from a cybersecurity perspective. This talk reveals a hidden vulnerability in standard WordPress installations and provides easy solutions.<\/p>\n","protected":false},"author":16829483,"featured_media":7422,"template":"","meta":{"_wcpt_session_time":1780747200,"_wcpt_session_duration":600,"_wcpt_session_type":"session","_wcpt_session_slides":"https:\/\/europe.wordcamp.org\/2026\/files\/2026\/06\/Daniel-Silva-The-hidden-DDoS-threat-in-WordPress.pdf","_wcpt_session_video":"https:\/\/wordpress.tv\/2026\/06\/08\/the-hidden-ddos-threat-in-wordpress-abusing-the-search-endpoint\/","_wcpt_speaker_id":[6876],"footnotes":""},"session_track":[49],"session_category":[64],"class_list":["post-7052","wcb_session","type-wcb_session","status-publish","has-post-thumbnail","hentry","wcb_track-track-2","wcb_session_category-cybersecurity"],"jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/pgyJ7n-1PK","session_date_time":{"date":"June 6, 2026","time":"14:00"},"session_speakers":[{"id":"6876","slug":"samuel-silva","name":"Samuel Silva","link":"https:\/\/europe.wordcamp.org\/2026\/speaker\/samuel-silva\/"}],"session_cats_rendered":"Cybersecurity","_links":{"self":[{"href":"https:\/\/europe.wordcamp.org\/2026\/wp-json\/wp\/v2\/sessions\/7052","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/europe.wordcamp.org\/2026\/wp-json\/wp\/v2\/sessions"}],"about":[{"href":"https:\/\/europe.wordcamp.org\/2026\/wp-json\/wp\/v2\/types\/wcb_session"}],"version-history":[{"count":3,"href":"https:\/\/europe.wordcamp.org\/2026\/wp-json\/wp\/v2\/sessions\/7052\/revisions"}],"predecessor-version":[{"id":11958,"href":"https:\/\/europe.wordcamp.org\/2026\/wp-json\/wp\/v2\/sessions\/7052\/revisions\/11958"}],"speakers":[{"embeddable":true,"href":"https:\/\/europe.wordcamp.org\/2026\/wp-json\/wp\/v2\/speakers\/6876"}],"author":[{"embeddable":true,"href":"https:\/\/europe.wordcamp.org\/2026\/wp-json\/wporg\/v1\/users\/samuelsilvapt"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/europe.wordcamp.org\/2026\/wp-json\/wp\/v2\/media\/7422"}],"wp:attachment":[{"href":"https:\/\/europe.wordcamp.org\/2026\/wp-json\/wp\/v2\/media?parent=7052"}],"wp:term":[{"taxonomy":"wcb_track","embeddable":true,"href":"https:\/\/europe.wordcamp.org\/2026\/wp-json\/wp\/v2\/session_track?post=7052"},{"taxonomy":"wcb_session_category","embeddable":true,"href":"https:\/\/europe.wordcamp.org\/2026\/wp-json\/wp\/v2\/session_category?post=7052"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}