The latest WordPress security news and insights

Featured articles

Unauthenticated PHP Object Injection in Flatsome Theme

6 September, 2023

Unauthenticated PHP Object Injection in Flatsome Theme <= 3.17.5

                php object injection            

                flatsome            

31 August, 2023

Critical Arbitrary File Upload Patched in Forminator Plugin

                Critical Vulnerability            

                arbitrary file upload            

                forminator            

Pre-Auth Access Token Manipulation in All-in-One WP Migration Extensions

30 August, 2023

Pre-Auth Access Token Manipulation in All-in-One WP Migration Extensions

                access token            

                all-in-one wp migration            

25 July, 2022

Patchstack Weekly #33: What is Server Side Request Forgery (SSRF)?

                patchstack weekly            

                WordPress Security Vulnerabilities            

Episode 32 - Are millions of wordpress sites really under attack

18 July, 2022

Patchstack Weekly #32: Are Millions of WordPress Sites Really Under Attack?

                Website Hacking Statistics            

                patchstack weekly            

Patchstack Alliance June 2022 - bug hunt prize winners

15 July, 2022

Patchstack Alliance - June Winners and Leaderboard

                Security Community            

                Patchstack alliance            

                bug hunt            

                Patchstack Red Team

15 July, 2022

How to Avoid Abandoned WordPress Plugins and Themes

abandonware

Episode 31 - why you should remove unused plugins - featured image

11 July, 2022

Patchstack Weekly #31: Why You Should Remove Unused Plugins

patchstack weekly

10 July, 2022

Patchstack Bug Bounty Guidelines & Rules

                Security Community            

                Patchstack alliance            

Patchstack helpers - episode 1 - Oliver Sild talks about community and mentorship

8 July, 2022

Patchstack Weekly #27: How to Update wp_options Securely.

                WordPress plugins            

                WordPress development            

                WordPress Security Vulnerabilities            

                patchstack weekly            

                wp options