WordPress security: an analysis based on publicly available exploits
Securing web application code by static analysis and runtime protection