The latest WordPress security news and insights

Featured articles

High Priority Vulnerabilities Patched in Uncode Core Plugin

7 May, 2024

High Priority Vulnerabilities Patched in Uncode Core Plugin

                plugin            

                privilege escalation            

                Uncode            

                arbitrary file deletion

3 April, 2024

Critical Vulnerabilities Patched in REHub Theme and Plugin

                Critical Vulnerability            

                SQL Injection            

                REHub            

                Local File Inclusion

Critical Vulnerability Found in GOTMLS Plugin

12 March, 2024

Critical Vulnerability Found in GOTMLS Plugin

                Critical Vulnerability            

                rce            

Authenticated Privilege Escalation in Essential Addons for Elementor Plugin

15 September, 2023

Authenticated Privilege Escalation Vulnerability in Essential Addons for Elementor

                Essential Addons for Elementor            

                privilege escalation            

WordPress.org is an open source cms, but WordPress.com is a paid hosting platform

14 September, 2023

Patchstack Is FREE On the Official WordPress Repository

patchstack

6 September, 2023

Unauthenticated PHP Object Injection in Flatsome Theme <= 3.17.5

                php object injection            

                flatsome            

31 August, 2023

Critical Arbitrary File Upload Patched in Forminator Plugin

                Critical Vulnerability            

                arbitrary file upload            

                forminator            

30 August, 2023

Pre-Auth Access Token Manipulation in All-in-One WP Migration Extensions

                access token            

                all-in-one wp migration            

Patchstack - wordpress zombie plugin pandemic affecting 1.6 million websites

25 August, 2023

The WordPress “Zombie” Plugins Pandemic Affects 1.6M+ Websites

WordPress plugins

jupiter x core vulnerability patched - patchstack social - rafie mohammad

24 August, 2023

Critical Vulnerabilities Patched in Jupiter X Core Plugin

                account takeover            

                Jupiter X            

                Critical Vulnerability            

                arbitrary file upload

10 August, 2023

Multiple High and Critical Vulnerabilities in Avada Theme and Plugin

3 August, 2023

Authenticated RCE in JetElements For Elementor Plugin

                Elementor            

                rce            

                jetelements            

                Critical Vulnerability

27 July, 2023

Multiple High Severity Vulnerabilities in Ninja Forms Plugin

                ninja forms            

                xss            

                broken access control            

18 July, 2023

Site-Wide Reflected XSS in Freemius WordPress SDK Affecting Millions of Sites

                freemius            

                supply chain attack            

                xss            

14 July, 2023

Critical Privilege Escalation in HT Mega Plugin Affecting 100k+ Sites

                privilege escalation            

                Critical Vulnerability            

« Previous 1 … 8 9 10 11 12 … 29 Next »

The latest WordPress security news and insights

Featured articles

High Priority Vulnerabilities Patched in Uncode Core Plugin

Critical Vulnerabilities Patched in REHub Theme and Plugin

Critical Vulnerability Found in GOTMLS Plugin

Weekly security advice

Authenticated Privilege Escalation Vulnerability in Essential Addons for Elementor

Patchstack Is FREE On the Official WordPress Repository

Unauthenticated PHP Object Injection in Flatsome Theme <= 3.17.5

Critical Arbitrary File Upload Patched in Forminator Plugin

Pre-Auth Access Token Manipulation in All-in-One WP Migration Extensions

The WordPress “Zombie” Plugins Pandemic Affects 1.6M+ Websites

Critical Vulnerabilities Patched in Jupiter X Core Plugin

Multiple High and Critical Vulnerabilities in Avada Theme and Plugin

Authenticated RCE in JetElements For Elementor Plugin

Multiple High Severity Vulnerabilities in Ninja Forms Plugin

Site-Wide Reflected XSS in Freemius WordPress SDK Affecting Millions of Sites

Critical Privilege Escalation in HT Mega Plugin Affecting 100k+ Sites

Website security

For plugin devs

For researchers

Resources

Patchstack

Socials

Website security

For plugin devs

For researchers

Resources

Patchstack

Socials