Interview with Stefan Esser
http://blogsecurity.net/wordpress/interview-280607

Esser, Stefan
Blog Security
2007

Abstract:

I think the WordPress software is the best blogging software around from an end user’s perspective. Its GUI is full of eye-candy and features that are not present in other blog software. But wearing my security hat, I see past this eye-candy onto the code and see several bad design decisions.