|

What Building an AI Vulnerability Hunter Taught Me

I’ve worked in WordPress security for 18 years. We Watch Your Website has been cleaning and protecting sites since 2007, and today we watch close to 4 million of them. I’ve seen just about every way a plugin can go wrong. So when I started building an AI-assisted analyzer to find vulnerabilities in WordPress plugins,…

We Built 35 AI-Generated Apps and Put Every One Through a Security Scanner

By Tom Raef, Founder – We Watch Your Website There’s a moment in every security researcher’s career when something stops being theoretical and becomes undeniably real. For me, that moment came about halfway through this project, when I realized that every single platform we tested, without exception, was telling its users their app was ready…

The Vibe Coding Trap: How AI-Generated WordPress Plugins Are Becoming Attack Vectors

Security Advisory | We Watch Your Website   The calls started coming in before the coffee cooled. A WordPress site owner — developer by trade, not by security background — had used an AI assistant to build a custom plugin over a weekend. It handled contact form submissions, wrote data to a database, and passed a few…