Featured

Author's position will be here

Featured

Latest WordPress Security 101 Plugin Recommendations Security Advisories Patchstack News Case Studies Bug Bounty

9 July, 2025

Patchstack managed VDP report forwarding

mvdp

9 June, 2025

Unpatched Account Takeover Vulnerability in PayU CommercePro Plugin

                Critical Vulnerability            

                account takeover            

5 June, 2025

NEW: Patchstack AI code review tool and Security Suite for plugin vendors

27 May, 2025

Unpatched Critical Vulnerability in TI WooCommerce Wishlist Plugin

                Critical Vulnerability            

                arbitrary file upload            

17 April, 2025

Critical RomethemeKit For Elementor Plugin Vulnerability Patched

                Critical Vulnerability            

                Elementor            

                rce            

10 April, 2025

Critical SureTriggers Plugin Vulnerability Exploited within 4 hours

                Critical Vulnerability            

                SureTriggers            

                Rest API            

27 March, 2025

New Year, New Threats: Q1 2025's Most Exploited WordPress Vulnerabilities

                WordPress security            

                vpatch            

20 March, 2025

Critical LFI to RCE Vulnerability in WP Ghost Plugin Affecting 200k+ Sites

                Critical Vulnerability            

                rce            

                lfi            

                alliance

5 March, 2025

Unauthenticated Arbitrary File Upload Vulnerability in Chaty Pro Plugin

                Critical Vulnerability            

                arbitrary file upload            

                chaty-pro            

                Malicious File Upload

24 February, 2025

Reflected XSS Patched in Essential Addons for Elementor Affecting 2+ Million Sites

                Essential Addons for Elementor            

                Elementor            

                xss            

20 February, 2025

Critical Privilege Escalation Patched in KLEO Theme's Plugin

                Critical Vulnerability            

                privilege escalation            

                ENVATO            

5 February, 2025

Rare Case of Privilege Escalation in ASE Plugin Affecting 100k+ Sites

                Critical Vulnerability            

                privilege escalation            

1 2 3 … 14 Next »

Featured

Featured

Patchstack managed VDP report forwarding

Unpatched Account Takeover Vulnerability in PayU CommercePro Plugin

NEW: Patchstack AI code review tool and Security Suite for plugin vendors

Unpatched Critical Vulnerability in TI WooCommerce Wishlist Plugin

Critical RomethemeKit For Elementor Plugin Vulnerability Patched

Critical SureTriggers Plugin Vulnerability Exploited within 4 hours

New Year, New Threats: Q1 2025's Most Exploited WordPress Vulnerabilities

Critical LFI to RCE Vulnerability in WP Ghost Plugin Affecting 200k+ Sites

Unauthenticated Arbitrary File Upload Vulnerability in Chaty Pro Plugin

Reflected XSS Patched in Essential Addons for Elementor Affecting 2+ Million Sites

Critical Privilege Escalation Patched in KLEO Theme's Plugin

Rare Case of Privilege Escalation in ASE Plugin Affecting 100k+ Sites

Monthly security advice

Website security

For plugin devs

For researchers

Resources

Patchstack

Socials

Website security

For plugin devs

For researchers

Resources

Patchstack

Socials