Featured

Author's position will be here

Featured

Latest WordPress how-to's Plugin recommendations Interview WordPress Security Virtual Patches Security advice Security advisories Patchstack news Patchstack how-to's

wordpress 6-3-2 security update technical analysis by patchstack

13 October, 2023

WordPress Core 6.3.2 Security Update – Technical Advisory

                security release            

                WordPress core            

12 October, 2023

Pre-Auth Arbitrary File Upload in User Submitted Posts Plugin

Critical Vulnerability

Patchstack - premium wordpress theme security risks - case study

6 October, 2023

Case Study: When Your Premium WordPress Theme Is More Than You Bargained For

                WordPress security            

                case study            

Two Path to Privilege Escalation Bugs Found In the Simple Membership Plugin

27 September, 2023

Two Paths to Privilege Escalation Vulnerability In The Simple Membership Plugin

                privilege escalation            

                simple membership            

Authenticated Privilege Escalation in Essential Addons for Elementor Plugin

15 September, 2023

Authenticated Privilege Escalation Vulnerability in Essential Addons for Elementor

                Essential Addons for Elementor            

                privilege escalation            

6 September, 2023

Unauthenticated PHP Object Injection in Flatsome Theme <= 3.17.5

                php object injection            

                flatsome            

31 August, 2023

Critical Arbitrary File Upload Patched in Forminator Plugin

                Critical Vulnerability            

                arbitrary file upload            

                forminator            

30 August, 2023

Pre-Auth Access Token Manipulation in All-in-One WP Migration Extensions

                access token            

                all-in-one wp migration            

jupiter x core vulnerability patched - patchstack social - rafie mohammad

24 August, 2023

Critical Vulnerabilities Patched in Jupiter X Core Plugin

                Jupiter X            

                Critical Vulnerability            

                arbitrary file upload            

                account takeover

10 August, 2023

Multiple High and Critical Vulnerabilities in Avada Theme and Plugin

3 August, 2023

Authenticated RCE in JetElements For Elementor Plugin

                Critical Vulnerability            

                Elementor            

                rce            

                jetelements

27 July, 2023

Multiple High Severity Vulnerabilities in Ninja Forms Plugin

                ninja forms            

                xss            

                broken access control            

« Previous 1 2 3 4 5 6 … 12 Next »

Featured

Featured

WordPress Core 6.3.2 Security Update – Technical Advisory

Pre-Auth Arbitrary File Upload in User Submitted Posts Plugin

Case Study: When Your Premium WordPress Theme Is More Than You Bargained For

Two Paths to Privilege Escalation Vulnerability In The Simple Membership Plugin

Authenticated Privilege Escalation Vulnerability in Essential Addons for Elementor

Unauthenticated PHP Object Injection in Flatsome Theme <= 3.17.5

Critical Arbitrary File Upload Patched in Forminator Plugin

Pre-Auth Access Token Manipulation in All-in-One WP Migration Extensions

Critical Vulnerabilities Patched in Jupiter X Core Plugin

Multiple High and Critical Vulnerabilities in Avada Theme and Plugin

Authenticated RCE in JetElements For Elementor Plugin

Multiple High Severity Vulnerabilities in Ninja Forms Plugin

Weekly security advice

Website security

For plugin devs

For researchers

Resources

Patchstack

Socials

Website security

For plugin devs

For researchers

Resources

Patchstack

Socials