The latest WordPress security news and insights

Featured articles

wordpress 6-3-2 security update technical analysis by patchstack

1 July, 2024

WordPress Core 6.5.5 Security Update – Technical Advisory

                WordPress core            

                security release            

Multiple Vulnerabilities in WooCommerce Amazon Affiliates Plugin

6 June, 2024

Multiple Vulnerabilities in WooCommerce Amazon Affiliates Plugin

                privilege escalation            

                SQL Injection            

                arbitrary option update            

                WZone            

                ENVATO

XSS Vulnerability Patched in Slider Revolution Plugin

28 May, 2024

Unauthenticated XSS Vulnerability Patched in Slider Revolution Plugin

                Slider Revolution            

                Audit            

                xss            

13 October, 2023

WordPress Core 6.3.2 Security Update – Technical Advisory

                WordPress core            

                security release            

12 October, 2023

Pre-Auth Arbitrary File Upload in User Submitted Posts Plugin

Critical Vulnerability

How to block IPs and countries from accessing your wordpress website

10 October, 2023

How To Block IPs, Countries, and Regions For WordPress

WordPress security

Patchstack - premium wordpress theme security risks - case study

6 October, 2023

Case Study: When Your Premium WordPress Theme Is More Than You Bargained For

                WordPress security            

                case study            

patchstack - how to limit login attempts on wordpress - 5 methods

28 September, 2023

How To Limit Login Attempts on WordPress (+ Should You?)

WordPress security

Two Path to Privilege Escalation Bugs Found In the Simple Membership Plugin

27 September, 2023

Two Paths to Privilege Escalation Vulnerability In The Simple Membership Plugin

                privilege escalation            

                simple membership            

Authenticated Privilege Escalation in Essential Addons for Elementor Plugin

15 September, 2023

Authenticated Privilege Escalation Vulnerability in Essential Addons for Elementor

                Essential Addons for Elementor            

                privilege escalation            

WordPress.org is an open source cms, but WordPress.com is a paid hosting platform

14 September, 2023

Patchstack Is FREE On the Official WordPress Repository

patchstack

6 September, 2023

Unauthenticated PHP Object Injection in Flatsome Theme <= 3.17.5

                php object injection            

                flatsome            

31 August, 2023

Critical Arbitrary File Upload Patched in Forminator Plugin

                arbitrary file upload            

                forminator            

                Critical Vulnerability            

30 August, 2023

Pre-Auth Access Token Manipulation in All-in-One WP Migration Extensions

                access token            

                all-in-one wp migration            

Patchstack - wordpress zombie plugin pandemic affecting 1.6 million websites

25 August, 2023

The WordPress “Zombie” Plugins Pandemic Affects 1.6M+ Websites

WordPress plugins

« Previous 1 … 9 10 11 12 13 … 31 Next »

The latest WordPress security news and insights

Featured articles

WordPress Core 6.5.5 Security Update – Technical Advisory

Multiple Vulnerabilities in WooCommerce Amazon Affiliates Plugin

Unauthenticated XSS Vulnerability Patched in Slider Revolution Plugin

Monthly security advice

WordPress Core 6.3.2 Security Update – Technical Advisory

Pre-Auth Arbitrary File Upload in User Submitted Posts Plugin

How To Block IPs, Countries, and Regions For WordPress

Case Study: When Your Premium WordPress Theme Is More Than You Bargained For

How To Limit Login Attempts on WordPress (+ Should You?)

Two Paths to Privilege Escalation Vulnerability In The Simple Membership Plugin

Authenticated Privilege Escalation Vulnerability in Essential Addons for Elementor

Patchstack Is FREE On the Official WordPress Repository

Unauthenticated PHP Object Injection in Flatsome Theme <= 3.17.5

Critical Arbitrary File Upload Patched in Forminator Plugin

Pre-Auth Access Token Manipulation in All-in-One WP Migration Extensions

The WordPress “Zombie” Plugins Pandemic Affects 1.6M+ Websites

Website security

For plugin devs

For researchers

Resources

Patchstack

Socials

Website security

For plugin devs

For researchers

Resources

Patchstack

Socials