Raining CVE's on wordpress plugins using Semgrep Slide Deck

Here are the slide deck for the Nullcon Talk me and Shreya presented.

Presentation for nullcon 2022Download

And here are the Demo videos for both semgroup and XSS bomb.

Basic Semgrep usage

XSS bomb in action

XSS bomb in action