Skip to main content
JavaScript is disabled in your browser. Please enable JavaScript for a better experience.
Pricing
Solutions
WordPress security
For hosts
Managed VDP
Bug bounty
Plugin auditing
Vulnerability database
Resources
Case studies
Security advisories
WordPress security 101
2025 security whitepaper
Login
Start trial
🚀 Black Friday Deal! 50% off Developer Plan for 6 months
The latest WordPress security news and insights
Latest
WordPress Security 101
Plugin Recommendations
Security Advisories
Patchstack News
Case Studies
Bug Bounty
Search for:
Featured articles
29 January, 2025
Privilege Escalation Vulnerability Patched in Better Find and Replace Plugin
zeroday
better find and replace
privilege escalation
22 January, 2025
Unauthenticated Privilege Escalation Vulnerability in RH - Real Estate Theme
Critical Vulnerability
privilege escalation
ENVATO
10 January, 2025
Critical Vulnerability Patched in GiveWP Plugin
zeroday
givewp
Critical Vulnerability
php object injection
Zeroday bounties
Monthly security advice
Get the latest WordPress security intelligence delivered to your inbox.
NEW
: Get started with 5 bite-sized security lessons.
Email Signup
Email
Subscribe
21 January, 2025
Interview with Kévin Mosbahi AKA Mika
Patchstack alliance
researcher
security
14 January, 2025
How & Why You Should Remove Unused WordPress Plugins
10 January, 2025
Critical Vulnerability Patched in GiveWP Plugin
zeroday
givewp
Critical Vulnerability
php object injection
Zeroday bounties
8 January, 2025
Critical Vulnerabilities Found in Fancy Product Designer Plugin
Critical Vulnerability
arbitrary file upload
SQL Injection
ENVATO
27 December, 2024
Hardening WordPress – A Checklist To Get Started
24 December, 2024
How to Fix the WordPress Redirect Hack
23 December, 2024
SQL Injection in WordPress – Everything You Need To Know
Web Application Security
sqli
SQL Injection
23 December, 2024
Multiple Critical Vulnerabilities Patched in WPLMS and VibeBP Plugins
ENVATO
Critical Vulnerability
privilege escalation
arbitrary file upload
theme
SQL Injection
22 December, 2024
How to Configure the X-Frame-Options Header in WordPress
x-frame-options
security headers
content-security-policy
22 December, 2024
How To Protect WordPress Against Cross-Site Scripting Attacks (XSS)
xss vulnerabilities
wordpress xss
Cross-Site Scripting
21 December, 2024
Understanding Cookie Stealing Attacks: How They Work and Their Impact on WordPress Users
20 December, 2024
NEW: Announcing Patchstack API for Endless Automations
« Previous
1
2
3
4
5
6
…
33
Next »
Load more
Website security
Pricing
For WordPress
For WooCommerce
For agencies
API for hosts
Documentation
Log in
For plugin devs
Managed VDP
Log in
Active programs
Security auditing
For researchers
Bug bounty
Log in
Guidelines
Leaderboard
Learn
Discord
Resources
Vulnerability database
Whitepaper 2025
Vulnerability statistics
Case studies
Articles
Patchstack
About
Careers
Merch store
Media kit
Socials
LinkedIn
Facebook
X
© 2025
Patchstack
DPA
Privacy Policy
Terms & Conditions
Website security
Pricing
For WordPress
For WooCommerce
For agencies
API for hosts
Documentation
Log in
For plugin devs
Managed VDP
Log in
Active programs
Security auditing
For researchers
Bug bounty
Log in
Guidelines
Leaderboard
Learn
Discord
Resources
Vulnerability database
Whitepaper 2025
Vulnerability statistics
Case studies
Articles
Patchstack
About
Careers
Merch store
Media kit
Socials
LinkedIn
Facebook
X
© 2025
Patchstack
DPA
Privacy Policy
Terms & Conditions
Looks like your browser is blocking our support chat widget. Turn off adblockers and reload the page.
Reload page
close
chevron-right
chevron-down
bars
cross
menu
