Featured

Author's position will be here

Featured

Latest WordPress Security 101 Plugin Recommendations Security Advisories Patchstack News Case Studies Bug Bounty

6 September, 2023

Unauthenticated PHP Object Injection in Flatsome Theme <= 3.17.5

                php object injection            

                flatsome            

31 August, 2023

Critical Arbitrary File Upload Patched in Forminator Plugin

                Critical Vulnerability            

                arbitrary file upload            

                forminator            

30 August, 2023

Pre-Auth Access Token Manipulation in All-in-One WP Migration Extensions

                all-in-one wp migration            

                access token            

jupiter x core vulnerability patched - patchstack social - rafie mohammad

24 August, 2023

Critical Vulnerabilities Patched in Jupiter X Core Plugin

                Critical Vulnerability            

                arbitrary file upload            

                account takeover            

                Jupiter X

10 August, 2023

Multiple High and Critical Vulnerabilities in Avada Theme and Plugin

3 August, 2023

Authenticated RCE in JetElements For Elementor Plugin

                rce            

                jetelements            

                Critical Vulnerability            

                Elementor

27 July, 2023

Multiple High Severity Vulnerabilities in Ninja Forms Plugin

                ninja forms            

                xss            

                broken access control            

18 July, 2023

Site-Wide Reflected XSS in Freemius WordPress SDK Affecting Millions of Sites

                freemius            

                supply chain attack            

                xss            

31 May, 2023

« Previous 1 … 4 5 6 7 8 … 13 Next »

Website security

Pricing For WordPress For WooCommerce For agencies API for hosts Documentation Log in

For plugin devs

Managed VDP

Active programs Security auditing

For researchers

Bug bounty

Guidelines Leaderboard

Learn

Discord

Resources

Vulnerability database Whitepaper 2025

Vulnerability statistics

Case studies

Articles

Patchstack

About Careers Merch store Media kit

Socials

LinkedIn Facebook X

DPA Privacy Policy Terms & Conditions

Featured

Featured

Unauthenticated PHP Object Injection in Flatsome Theme <= 3.17.5

Critical Arbitrary File Upload Patched in Forminator Plugin

Pre-Auth Access Token Manipulation in All-in-One WP Migration Extensions

Critical Vulnerabilities Patched in Jupiter X Core Plugin

Multiple High and Critical Vulnerabilities in Avada Theme and Plugin

Authenticated RCE in JetElements For Elementor Plugin

Multiple High Severity Vulnerabilities in Ninja Forms Plugin

Site-Wide Reflected XSS in Freemius WordPress SDK Affecting Millions of Sites

How to Secure WordPress Login URL

How to Install SSL Certificate on WordPress

How To Perform a WordPress Backup In 3 Simple Methods

How To Find Out If My WordPress Site Has Vulnerable Plugins?

Monthly security advice

Website security

For plugin devs

For researchers

Resources

Patchstack

Socials

Website security

For plugin devs

For researchers

Resources

Patchstack

Socials