Skip to main content
JavaScript is disabled in your browser. Please enable JavaScript for a better experience.
Pricing
Case studies
Login
Start trial
🚀 Black Friday Deal! 50% off Developer Plan for 6 months
The latest WordPress security news and insights
Latest
WordPress Security 101
Plugin Recommendations
Security Advisories
Patchstack News
Case Studies
Bug Bounty
Search for:
Featured articles
27 September, 2023
Two Paths to Privilege Escalation Vulnerability In The Simple Membership Plugin
privilege escalation
simple membership
15 September, 2023
Authenticated Privilege Escalation Vulnerability in Essential Addons for Elementor
privilege escalation
Essential Addons for Elementor
6 September, 2023
Unauthenticated PHP Object Injection in Flatsome Theme <= 3.17.5
php object injection
flatsome
Monthly security advice
Get the latest WordPress security intelligence delivered to your inbox.
NEW
: Get started with 5 bite-sized security lessons.
Email Signup
Email
Subscribe
19 September, 2022
Patchstack Weekly #40: The WordCamp US Roundup
patchstack weekly
WCUS
16 September, 2022
Patchstack Alliance August Winners & Leaderboard
Patchstack alliance
5 September, 2022
Patchstack Weekly #39: WordPress 6.0.2 Security Release Details
patchstack weekly
2 September, 2022
Patchstack Is Partnering With Hostinger to Make WordPress Safer
29 August, 2022
Patchstack Weekly #38: What is Your Time to Patch?
patchstack weekly
22 August, 2022
Patchstack Weekly #37: What Is a CVSS Score?
patchstack weekly
15 August, 2022
Patchstack Alliance July Winners & Leaderboard
Patchstack alliance
15 August, 2022
Patchstack Weekly #36: What Makes a Good Security Bug Patching Practice?
patchstack weekly
12 August, 2022
A "New" Bug - PHP Object Injection via Insecure Instantiation
WordPress Security Vulnerabilities
8 August, 2022
Patchstack Weekly #35: SVG XSS Reported in Gutenberg
WordPress Security Vulnerabilities
patchstack weekly
1 August, 2022
Patchstack Weekly #34: Why You Shouldn't Use Nulled Plugins and Themes
patchstack weekly
25 July, 2022
Patchstack Weekly #33: What is Server Side Request Forgery (SSRF)?
patchstack weekly
WordPress Security Vulnerabilities
« Previous
1
…
21
22
23
24
25
…
35
Next »
Load more
Website security
Pricing
For WordPress
For WooCommerce
For agencies
API for hosts
Documentation
Log in
For plugin devs
Managed VDP
Log in
Active programs
Security auditing
Compliance (CRA)
For researchers
Bug bounty
Log in
Guidelines
Leaderboard
Learn
Discord
Resources
Vulnerability database
Whitepaper 2025
Vulnerability statistics
Case studies
Articles
Patchstack
About
Careers
Merch store
Media kit
Socials
LinkedIn
Facebook
X
© 2025
Patchstack
DPA
Privacy Policy
Terms & Conditions
Website security
Pricing
For WordPress
For WooCommerce
For agencies
API for hosts
Documentation
Log in
For plugin devs
Managed VDP
Log in
Active programs
Security auditing
Compliance (CRA)
For researchers
Bug bounty
Log in
Guidelines
Leaderboard
Learn
Discord
Resources
Vulnerability database
Whitepaper 2025
Vulnerability statistics
Case studies
Articles
Patchstack
About
Careers
Merch store
Media kit
Socials
LinkedIn
Facebook
X
Looks like your browser is blocking our support chat widget. Turn off adblockers and reload the page.
Reload page
close
chevron-right
chevron-down
bars
cross
menu
