The latest WordPress security news and insights

Featured articles

Critical Privilege Escalation in LiteSpeed Cache Plugin Affecting 5+ Million Sites

5 September, 2024

Critical Account Takeover Vulnerability Patched in LiteSpeed Cache Plugin

                Critical Vulnerability            

                account takeover            

                LiteSpeed Cache            

21 August, 2024

Critical Privilege Escalation in LiteSpeed Cache Plugin Affecting 5+ Million Sites

                privilege escalation            

                LiteSpeed Cache            

                zeroday            

                Critical Vulnerability

13 July, 2024

Critical Vulnerability Patched in Backup and Staging by WP Time Capsule Plugin

20 December, 2023

Critical SQL Injection Found in Porto Theme's Plugin

                Critical Vulnerability            

                SQL Injection            

                Porto            

                Premium Theme

18 December, 2023

Multiple Vulnerabilities Patched in Themify Ultra Theme

                php object injection            

                theme            

                themify            

                settings change            

                privilege escalation            

                arbitrary file upload

8 December, 2023

How to Quickly Change (Or Reset) WordPress Password

WordPress password

8 December, 2023

Critical Vulnerability in Elementor Affecting 5+ Million Websites

                Critical Vulnerability            

                Elementor            

                arbitrary file upload            

6 December, 2023

WordPress 6.4.2 Security Release

wordpress

5 December, 2023

How To Disable PHP Execution and Directory Browsing in WordPress?

PHP execution

4 December, 2023

Patchstack Is Now a Member Of The Open Source Security Foundation

OpenSSF

3 December, 2023

Fake CVE Phishing Campaign Tricks WordPress Users Into Installing Malware

                CVE-2023-45124            

                CVE            

« Previous 1 … 9 10 11 12 13 … 33 Next »

Website security

Pricing For WordPress For WooCommerce For agencies API for hosts Documentation Log in

For plugin devs

Managed VDP

Active programs Security auditing

For researchers

Bug bounty

Guidelines Leaderboard

Learn

Discord

Resources

Vulnerability database Whitepaper 2025

Vulnerability statistics

Case studies

Articles

Patchstack

About Careers Merch store Media kit

Socials

LinkedIn Facebook X

DPA Privacy Policy Terms & Conditions

The latest WordPress security news and insights

Featured articles

Critical Account Takeover Vulnerability Patched in LiteSpeed Cache Plugin

Critical Privilege Escalation in LiteSpeed Cache Plugin Affecting 5+ Million Sites

Critical Vulnerability Patched in Backup and Staging by WP Time Capsule Plugin

Monthly security advice

Critical SQL Injection Found in Porto Theme's Plugin

How to Backup WooCommerce Store?

Is WordPress Secure? Everything You Need to Know

How to Protect WordPress Against DDoS Attacks

How to Avoid Caching Sensitive Information In WordPress

Multiple Vulnerabilities Patched in Themify Ultra Theme

How to Quickly Change (Or Reset) WordPress Password

Critical Vulnerability in Elementor Affecting 5+ Million Websites

WordPress 6.4.2 Security Release

How To Disable PHP Execution and Directory Browsing in WordPress?

Patchstack Is Now a Member Of The Open Source Security Foundation

Fake CVE Phishing Campaign Tricks WordPress Users Into Installing Malware

Website security

For plugin devs

For researchers

Resources

Patchstack

Socials

Website security

For plugin devs

For researchers

Resources

Patchstack

Socials