Security AdvisoriesSeptember 25, 2026Cross-Site Request Forgery in Elementor Plugin Affecting 2 Million+ Sites
Security AdvisoriesSeptember 22, 2026CVE-2026-87902: Attackers Started Probing WordPress Sites Hours After the Patch
Security AdvisoriesAugust 21, 2026One slug, seven editions: the miniOrange SAML SSO bug that let anyone log in as your WordPress admin
Security AdvisoriesAugust 19, 2026Critical Unauthenticated File Upload to RCE in Elementor Pro Plugin
Security AdvisoriesAugust 12, 2026When a PNG Isn’t a PNG: WordPress Patches an Author-Level Imagick RCE