The latest WordPress security news and insights

Featured articles

5 February, 2025

Rare Case of Privilege Escalation in ASE Plugin Affecting 100k+ Sites

                Critical Vulnerability            

                privilege escalation            

29 January, 2025

Privilege Escalation Vulnerability Patched in Better Find and Replace Plugin

                privilege escalation            

                zeroday            

                better find and replace            

22 January, 2025

Unauthenticated Privilege Escalation Vulnerability in RH – Real Estate Theme

                Critical Vulnerability            

                privilege escalation            

                ENVATO            

8 January, 2025

Critical Vulnerabilities Found in Fancy Product Designer Plugin

                SQL Injection            

                ENVATO            

                Critical Vulnerability            

                arbitrary file upload

27 December, 2024

Hardening WordPress – A Checklist To Get Started

24 December, 2024

How to Fix the WordPress Redirect Hack

23 December, 2024

SQL Injection in WordPress – Everything You Need To Know

                sqli            

                SQL Injection            

                Web Application Security            

23 December, 2024

Multiple Critical Vulnerabilities Patched in WPLMS and VibeBP Plugins

                SQL Injection            

                ENVATO            

                Critical Vulnerability            

                privilege escalation            

                arbitrary file upload            

                theme

22 December, 2024

How to Configure the X-Frame-Options Header in WordPress

                x-frame-options            

                security headers            

                content-security-policy            

22 December, 2024

How To Protect WordPress Against Cross-Site Scripting Attacks (XSS)

                xss vulnerabilities            

                wordpress xss            

                Cross-Site Scripting            

21 December, 2024

Understanding Cookie Stealing Attacks: How They Work and Their Impact on WordPress Users

Use the Patchstack Developer plan API to create automations

20 December, 2024

NEW: Announcing Patchstack API for Endless Automations

17 December, 2024

What to do if your WooCommerce site gets hacked: A 10-step recovery process

woocommerce

17 December, 2024

Virtual Patches vs. Hackers: Q4 2024’s Most Exploited WordPress Threats

                WordPress security            

                vpatch            

                virtual patches            

12 December, 2024

Multiple Critical Vulnerabilities Patched in Woffice Theme

                Critical Vulnerability            

                privilege escalation            

                account takeover            

                theme            

                ENVATO

« Previous 1 2 3 4 … 31 Next »

The latest WordPress security news and insights

Featured articles

Rare Case of Privilege Escalation in ASE Plugin Affecting 100k+ Sites

Privilege Escalation Vulnerability Patched in Better Find and Replace Plugin

Unauthenticated Privilege Escalation Vulnerability in RH – Real Estate Theme

Monthly security advice

Critical Vulnerabilities Found in Fancy Product Designer Plugin

Hardening WordPress – A Checklist To Get Started

How to Fix the WordPress Redirect Hack

SQL Injection in WordPress – Everything You Need To Know

Multiple Critical Vulnerabilities Patched in WPLMS and VibeBP Plugins

How to Configure the X-Frame-Options Header in WordPress

How To Protect WordPress Against Cross-Site Scripting Attacks (XSS)

Understanding Cookie Stealing Attacks: How They Work and Their Impact on WordPress Users

NEW: Announcing Patchstack API for Endless Automations

What to do if your WooCommerce site gets hacked: A 10-step recovery process

Virtual Patches vs. Hackers: Q4 2024’s Most Exploited WordPress Threats

Multiple Critical Vulnerabilities Patched in Woffice Theme

Website security

For plugin devs

For researchers

Resources

Patchstack

Socials

Website security

For plugin devs

For researchers

Resources

Patchstack

Socials