The latest WordPress security news and insights

Featured articles

Multiple Vulnerabilities in WooCommerce Amazon Affiliates Plugin

6 June, 2024

Multiple Vulnerabilities in WooCommerce Amazon Affiliates Plugin

                privilege escalation            

                SQL Injection            

                arbitrary option update            

                WZone            

                ENVATO

XSS Vulnerability Patched in Slider Revolution Plugin

28 May, 2024

Unauthenticated XSS Vulnerability Patched in Slider Revolution Plugin

                xss            

                Slider Revolution            

                Audit            

Critical Vulnerability Patched in UserPro Plugin

22 May, 2024

Critical Vulnerability Patched in UserPro Plugin

                Critical Vulnerability            

                privilege escalation            

                account takeover            

                UserPro

30 August, 2023

Pre-Auth Access Token Manipulation in All-in-One WP Migration Extensions

                access token            

                all-in-one wp migration            

Patchstack - wordpress zombie plugin pandemic affecting 1.6 million websites

25 August, 2023

The WordPress "Zombie" Plugins Pandemic Affects 1.6M+ Websites

WordPress plugins

jupiter x core vulnerability patched - patchstack social - rafie mohammad

24 August, 2023

Critical Vulnerabilities Patched in Jupiter X Core Plugin

                account takeover            

                Jupiter X            

                Critical Vulnerability            

                arbitrary file upload

10 August, 2023

Multiple High and Critical Vulnerabilities in Avada Theme and Plugin

3 August, 2023

Authenticated RCE in JetElements For Elementor Plugin

                Critical Vulnerability            

                Elementor            

                rce            

                jetelements

27 July, 2023

Multiple High Severity Vulnerabilities in Ninja Forms Plugin

                ninja forms            

                xss            

                broken access control            

18 July, 2023

Site-Wide Reflected XSS in Freemius WordPress SDK Affecting Millions of Sites

                xss            

                freemius            

                supply chain attack            

14 July, 2023

Critical Privilege Escalation in HT Mega Plugin Affecting 100k+ Sites

                Critical Vulnerability            

                privilege escalation            

13 June, 2023

« Previous 1 … 15 16 17 18 19 … 36 Next »

Website security

Pricing For WordPress For WooCommerce For agencies API for hosts Documentation Log in

For plugin devs

Managed VDP

Active programs Security auditing

Compliance (CRA)

For researchers

Bug bounty

Guidelines Leaderboard

Learn

Discord

Resources

Vulnerability database Whitepaper 2025

Vulnerability statistics

Case studies

Articles

Patchstack

About Careers Merch store Media kit

Socials

LinkedIn Facebook X

DPA Privacy Policy Terms & Conditions

The latest WordPress security news and insights

Featured articles

Multiple Vulnerabilities in WooCommerce Amazon Affiliates Plugin

Unauthenticated XSS Vulnerability Patched in Slider Revolution Plugin

Critical Vulnerability Patched in UserPro Plugin

Monthly security advice

Pre-Auth Access Token Manipulation in All-in-One WP Migration Extensions

The WordPress "Zombie" Plugins Pandemic Affects 1.6M+ Websites

Critical Vulnerabilities Patched in Jupiter X Core Plugin

Multiple High and Critical Vulnerabilities in Avada Theme and Plugin

Authenticated RCE in JetElements For Elementor Plugin

Multiple High Severity Vulnerabilities in Ninja Forms Plugin

Site-Wide Reflected XSS in Freemius WordPress SDK Affecting Millions of Sites

Critical Privilege Escalation in HT Mega Plugin Affecting 100k+ Sites

Unauthenticated IDOR to PII Disclosure in WooCommerce Stripe Gateway Plugin

How to Secure WordPress Login URL

Unauthenticated PHP Object Injection in Gravity Forms Plugin

How To Prevent Image Hotlinking in WordPress

Website security

For plugin devs

For researchers

Resources

Patchstack

Socials

Website security

For plugin devs

For researchers

Resources

Patchstack

Socials