The latest WordPress security news and insights

Featured articles

20 February, 2025

Critical Privilege Escalation Patched in KLEO Theme's Plugin

                ENVATO            

                Critical Vulnerability            

                privilege escalation            

5 February, 2025

Rare Case of Privilege Escalation in ASE Plugin Affecting 100k+ Sites

                Critical Vulnerability            

                privilege escalation            

29 January, 2025

Privilege Escalation Vulnerability Patched in Better Find and Replace Plugin

                privilege escalation            

                zeroday            

                better find and replace            

23 December, 2024

Multiple Critical Vulnerabilities Patched in WPLMS and VibeBP Plugins

                ENVATO            

                Critical Vulnerability            

                privilege escalation            

                arbitrary file upload            

                theme            

                SQL Injection

22 December, 2024

How to Configure the X-Frame-Options Header in WordPress

                content-security-policy            

                x-frame-options            

                security headers            

22 December, 2024

How To Protect WordPress Against Cross-Site Scripting Attacks (XSS)

                xss vulnerabilities            

                wordpress xss            

                Cross-Site Scripting            

21 December, 2024

Understanding Cookie Stealing Attacks: How They Work and Their Impact on WordPress Users

Use the Patchstack Developer plan API to create automations

20 December, 2024

NEW: Announcing Patchstack API for Endless Automations

17 December, 2024

What to do if your WooCommerce site gets hacked: A 10-step recovery process

woocommerce

17 December, 2024

Virtual Patches vs. Hackers: Q4 2024’s Most Exploited WordPress Threats

                WordPress security            

                vpatch            

                virtual patches            

12 December, 2024

Multiple Critical Vulnerabilities Patched in Woffice Theme

                Critical Vulnerability            

                privilege escalation            

                account takeover            

                theme            

                ENVATO

5 December, 2024

Unauthenticated Privilege Escalation Vulnerability Patched in Sweet Date Theme

                Critical Vulnerability            

                privilege escalation            

                ENVATO            

1 December, 2024

The Last WordPress Security Checklist You'll Ever Read

28 November, 2024

Authenticated RCE Patched in Rank Math SEO plugin

                Critical Vulnerability            

                ENVATO            

                File Read            

21 November, 2024

Unauthenticated Arbitrary File Read Vulnerability in Jobify Theme

                Critical Vulnerability            

                ENVATO            

                File Read            

« Previous 1 … 6 7 8 9 10 … 36 Next »

The latest WordPress security news and insights

Featured articles

Critical Privilege Escalation Patched in KLEO Theme's Plugin

Rare Case of Privilege Escalation in ASE Plugin Affecting 100k+ Sites

Privilege Escalation Vulnerability Patched in Better Find and Replace Plugin

Monthly security advice

Multiple Critical Vulnerabilities Patched in WPLMS and VibeBP Plugins

How to Configure the X-Frame-Options Header in WordPress

How To Protect WordPress Against Cross-Site Scripting Attacks (XSS)

Understanding Cookie Stealing Attacks: How They Work and Their Impact on WordPress Users

NEW: Announcing Patchstack API for Endless Automations

What to do if your WooCommerce site gets hacked: A 10-step recovery process

Virtual Patches vs. Hackers: Q4 2024’s Most Exploited WordPress Threats

Multiple Critical Vulnerabilities Patched in Woffice Theme

Unauthenticated Privilege Escalation Vulnerability Patched in Sweet Date Theme

The Last WordPress Security Checklist You'll Ever Read

Authenticated RCE Patched in Rank Math SEO plugin

Unauthenticated Arbitrary File Read Vulnerability in Jobify Theme

Website security

For plugin devs

For researchers

Resources

Patchstack

Socials

Website security

For plugin devs

For researchers

Resources

Patchstack

Socials