I sent in my resume and cover letter.

About a month later, they reached out and wanted to talk over Slack. I had an hour-long Slack interview with some technical questions and a few others, such as which Automattic product I would want to work on.

I was then given a broken plugin and had to fix it and address code styles. We then chatted back and forth about the plugin for a few weeks, discussing things I may have missed and why I did things a certain way.

Eventually, they decided not to move forward.

The interview process was a lot of work, but I would prefer that. You know that everyone they hire must be good if the process is that thorough.

The only thing that was hard was that I was not sure how detailed they wanted my answers about the plugin to be, and I think this ultimately tripped me up. It turns out they wanted really detailed answers, and I was going for detailed, but not extremely robust, assuming they would ask if they wanted more clarification.

What is a security flaw in this plugin?