The latest WordPress security news and insights

Featured articles

17 October, 2024

Critical Vulnerabilities in Ultimate Membership Pro Plugin

                privilege escalation            

                php object injection            

2 October, 2024

Unauthenticated Stored XSS Vulnerability in LiteSpeed Cache Plugin Affecting 6+ Million Sites

                xss            

                unauthenticated            

                LiteSpeed Cache            

25 September, 2024

Unpatched SQL Injection Vulnerability in TI WooCommerce Wishlist Plugin

                SQL Injection            

                ENVATO            

                Critical Vulnerability            

How EfficientWP uses Patchstack to mitigate WordPress security vulnerabilities

3 June, 2024

EfficientWP Case Study: Spending Less Time on WordPress Update Management with Patchstack

case study

how ellegaard uses patchstack to mitigate wordpress security vulnerabilities

3 June, 2024

ellegaard ID Case Study: From Cleaning Up Hacked Sites to Security by Default

case study

28 May, 2024

Unauthenticated XSS Vulnerability Patched in Slider Revolution Plugin

                xss            

                Slider Revolution            

                Audit            

22 May, 2024

Critical Vulnerability Patched in UserPro Plugin

                Critical Vulnerability            

                privilege escalation            

                account takeover            

                UserPro

21 May, 2024

Interview with Mat Rollings AKA stealthcopter

                researcher            

                security            

Exploring the Unknown: Beneath the Surface of the Unpatched WordPress SSRF - Patchstack analysis

17 May, 2024

Exploring the Unknown: Beneath the Surface of Unpatched WordPress SSRF

                WordPress core            

                ssrf            

14 May, 2024

Critical Vulnerabilities Found in XStore Theme and Plugin

                Critical Vulnerability            

                account takeover            

                php object injection            

                SQL Injection            

                arbitrary option update            

                XStore

10 May, 2024

The Capabilities of Large Language Models in Executing/Preventing Cyber Attacks

                cybersecurity            

                ai            

                LLM            

                Large language models            

                artificial intelligence

7 May, 2024

High Priority Vulnerabilities Patched in Uncode Core Plugin

                plugin            

                privilege escalation            

                Uncode            

                arbitrary file deletion