Skip to main content

The latest WordPress security news and insights

Latest WordPress Security 101 Plugin Recommendations Security Advisories Patchstack News Case Studies Bug Bounty

Featured articles

AI Engine Plugin Affected by Critical Vulnerability

9 January, 2024

AI Engine Plugin Affected by Critical Vulnerability

                AI Engine            

                Critical Vulnerability            

                arbitrary file upload            

Critical SQL Injection Found in Porto Theme's Plugin

20 December, 2023

Critical SQL Injection Found in Porto Theme's Plugin

                Critical Vulnerability            

                SQL Injection            

                Porto            

                Premium Theme

Multiple Vulnerabilities Patched in Themify Ultra Theme

12 December, 2023

Multiple Vulnerabilities Patched in Themify Ultra Theme

                settings change            

                privilege escalation            

                arbitrary file upload            

                php object injection            

                theme            

                themify

12 December, 2022

Patching an Arbitrary User Creation Security Bug in "thecartpress" Plugin

Patchstack weekly 51 - vulnerability supply chain problems

12 December, 2022

Patchstack Weekly #51: How One Vulnerability Affects Many

patchstack weekly

How to update wp_options securely

7 December, 2022

Patching a Broken Access Control Bug in the "account-manager-woocommerce" Plugin

5 December, 2022

December WordPress Bug-Hunting Challenge

patchstack weekly - when hacks come back

5 December, 2022

Patchstack Weekly #50: When Hacks Come Back

patchstack weekly

29 November, 2022

Patching an Arbitrary Plugin Disablement Bug in the "webmaster-tools-verification" Plugin

Hunting security bugs with SAST

21 November, 2022

Patchstack Weekly #49: Hunting Open-Source Security Bugs with SAST.

patchstack weekly

WordPress Security Notifications

15 November, 2022

Patching Remote Code Execution in the 'member-hero' Plugin

Dealing with software end of life

14 November, 2022

Patchstack Weekly #48: Dealing with End of Life and Unsupported Open Source Projects.

patchstack weekly

8 November, 2022

Patching an Arbitrary File Download Vulnerability in wsm-downloader

What is type juggling in PHP

7 November, 2022

Patchstack Weekly #47: What Is Type Juggling in PHP?

patchstack weekly

what is cross-site-scripting or XSS

31 October, 2022

Patchstack Weekly #46: How To Protect WordPress Against Cross-Site Scripting Attacks (XSS)

patchstack weekly

« Previous 1 … 19 20 21 22 23 … 35 Next »

Website security

Pricing For WordPress For WooCommerce For agencies API for hosts Documentation Log in

For plugin devs

Active programs Security auditing

Compliance (CRA)

For researchers

Guidelines Leaderboard

Resources

Vulnerability database Whitepaper 2025

Vulnerability statistics

Patchstack

About Careers Merch store Media kit

Socials

LinkedIn Facebook X

© 2025 Patchstack

DPA Privacy Policy Terms & Conditions

Looks like your browser is blocking our support chat widget. Turn off adblockers and reload the page.

Reload page