{"id":7056,"date":"2026-04-13T13:13:13","date_gmt":"2026-04-13T12:13:13","guid":{"rendered":"https:\/\/europe.wordcamp.org\/2026\/session\/testing-the-promise-does-secure-hosting-deliver\/"},"modified":"2026-06-09T12:33:32","modified_gmt":"2026-06-09T10:33:32","slug":"testing-the-promise-does-secure-hosting-deliver","status":"publish","type":"wcb_session","link":"https:\/\/europe.wordcamp.org\/2026\/session\/testing-the-promise-does-secure-hosting-deliver\/","title":{"rendered":"Testing the promise: does secure hosting deliver?"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">&#8220;Secure hosting&#8221; is everywhere in WordPress, but what does it actually protect against? We put this claim to the test with real penetration testing: 30 known vulnerabilities, multiple hosting providers, standardized methodology validated by independent observers.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The findings reveal a critical gap between marketing and reality. WordPress-specific attacks succeed most of the time.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This talk shares the complete results and explains why generic security fails.<\/p>\n\n\n\n<figure class=\"wp-block-embed is-type-rich is-provider-youtube wp-block-embed-youtube wp-embed-aspect-16-9 wp-has-aspect-ratio\"><div class=\"wp-block-embed__wrapper\">\n<span class=\"embed-youtube\" style=\"text-align:center; display: block;\"><iframe loading=\"lazy\" class=\"youtube-player\" width=\"640\" height=\"360\" src=\"https:\/\/www.youtube.com\/embed\/Q2xt4ul4dOM?version=3&#038;rel=1&#038;showsearch=0&#038;showinfo=1&#038;iv_load_policy=1&#038;fs=1&#038;hl=en-GB&#038;autohide=2&#038;wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\"><\/iframe><\/span>\n<\/div><\/figure>\n","protected":false},"excerpt":{"rendered":"<p>&#8220;Secure hosting&#8221; is everywhere in WordPress, but what does it actually protect against? We put this claim to the test with real penetration testing: 30 known vulnerabilities, multiple hosting providers, standardized methodology validated by independent observers. The findings reveal a critical gap between marketing and reality. WordPress-specific attacks succeed most of the time. This talk [&hellip;]<\/p>\n","protected":false},"author":13842562,"featured_media":7429,"template":"","meta":{"_wcpt_session_time":1780752600,"_wcpt_session_duration":1800,"_wcpt_session_type":"session","_wcpt_session_slides":"https:\/\/europe.wordcamp.org\/2026\/files\/2026\/06\/Maciek-Palmowski-Testing-the-promise_-does-secure-hosting-deliver.pdf","_wcpt_session_video":"https:\/\/wordpress.tv\/2026\/06\/08\/testing-the-promise-does-secure-hosting-deliver\/","_wcpt_speaker_id":[6880],"footnotes":""},"session_track":[49],"session_category":[64],"class_list":["post-7056","wcb_session","type-wcb_session","status-publish","has-post-thumbnail","hentry","wcb_track-track-2","wcb_session_category-cybersecurity"],"jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/pgyJ7n-1PO","session_date_time":{"date":"June 6, 2026","time":"15:30"},"session_speakers":[{"id":"6880","slug":"maciek-palmowski","name":"Maciek Palmowski","link":"https:\/\/europe.wordcamp.org\/2026\/speaker\/maciek-palmowski\/"}],"session_cats_rendered":"Cybersecurity","_links":{"self":[{"href":"https:\/\/europe.wordcamp.org\/2026\/wp-json\/wp\/v2\/sessions\/7056","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/europe.wordcamp.org\/2026\/wp-json\/wp\/v2\/sessions"}],"about":[{"href":"https:\/\/europe.wordcamp.org\/2026\/wp-json\/wp\/v2\/types\/wcb_session"}],"version-history":[{"count":4,"href":"https:\/\/europe.wordcamp.org\/2026\/wp-json\/wp\/v2\/sessions\/7056\/revisions"}],"predecessor-version":[{"id":11963,"href":"https:\/\/europe.wordcamp.org\/2026\/wp-json\/wp\/v2\/sessions\/7056\/revisions\/11963"}],"speakers":[{"embeddable":true,"href":"https:\/\/europe.wordcamp.org\/2026\/wp-json\/wp\/v2\/speakers\/6880"}],"author":[{"embeddable":true,"href":"https:\/\/europe.wordcamp.org\/2026\/wp-json\/wporg\/v1\/users\/palmiak"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/europe.wordcamp.org\/2026\/wp-json\/wp\/v2\/media\/7429"}],"wp:attachment":[{"href":"https:\/\/europe.wordcamp.org\/2026\/wp-json\/wp\/v2\/media?parent=7056"}],"wp:term":[{"taxonomy":"wcb_track","embeddable":true,"href":"https:\/\/europe.wordcamp.org\/2026\/wp-json\/wp\/v2\/session_track?post=7056"},{"taxonomy":"wcb_session_category","embeddable":true,"href":"https:\/\/europe.wordcamp.org\/2026\/wp-json\/wp\/v2\/session_category?post=7056"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}