Security advisories

Author's position will be here

Security advisories

Latest WordPress Security 101 Plugin recommendations Security advisories Patchstack news Case studies Bug bounty

5 February, 2025

Rare Case of Privilege Escalation in ASE Plugin Affecting 100k+ Sites

                Critical Vulnerability            

                privilege escalation            

29 January, 2025

Privilege Escalation Vulnerability Patched in Better Find and Replace Plugin

                zeroday            

                better find and replace            

                privilege escalation            

22 January, 2025

Unauthenticated Privilege Escalation Vulnerability in RH – Real Estate Theme

                Critical Vulnerability            

                privilege escalation            

                ENVATO            

10 January, 2025

Critical Vulnerability Patched in GiveWP Plugin

                Zeroday bounties            

                zeroday            

                givewp            

                Critical Vulnerability            

                php object injection

8 January, 2025

Critical Vulnerabilities Found in Fancy Product Designer Plugin

                Critical Vulnerability            

                arbitrary file upload            

                SQL Injection            

                ENVATO

23 December, 2024

Multiple Critical Vulnerabilities Patched in WPLMS and VibeBP Plugins

                ENVATO            

                Critical Vulnerability            

                privilege escalation            

                arbitrary file upload            

                theme            

                SQL Injection

12 December, 2024

Multiple Critical Vulnerabilities Patched in Woffice Theme

                account takeover            

                theme            

                ENVATO            

                Critical Vulnerability            

                privilege escalation

5 December, 2024

Unauthenticated Privilege Escalation Vulnerability Patched in Sweet Date Theme

                Critical Vulnerability            

                privilege escalation            

                ENVATO            

28 November, 2024

Authenticated RCE Patched in Rank Math SEO plugin

                ENVATO            

                File Read            

                Critical Vulnerability            

21 November, 2024

Unauthenticated Arbitrary File Read Vulnerability in Jobify Theme

                Critical Vulnerability            

                ENVATO            

                File Read            

14 November, 2024

Critical Account Takeover Patched in Really Simple Security Plugin

                Critical Vulnerability            

                account takeover            

                Really Simple Security            

29 October, 2024

Rare Case of Privilege Escalation Patched in LiteSpeed Cache Plugin

                privilege escalation            

                LiteSpeed Cache            

                zeroday            

1 2 3 … 9 Next »

Security advisories

Security advisories

Rare Case of Privilege Escalation in ASE Plugin Affecting 100k+ Sites

Privilege Escalation Vulnerability Patched in Better Find and Replace Plugin

Unauthenticated Privilege Escalation Vulnerability in RH – Real Estate Theme

Critical Vulnerability Patched in GiveWP Plugin

Critical Vulnerabilities Found in Fancy Product Designer Plugin

Multiple Critical Vulnerabilities Patched in WPLMS and VibeBP Plugins

Multiple Critical Vulnerabilities Patched in Woffice Theme

Unauthenticated Privilege Escalation Vulnerability Patched in Sweet Date Theme

Authenticated RCE Patched in Rank Math SEO plugin

Unauthenticated Arbitrary File Read Vulnerability in Jobify Theme

Critical Account Takeover Patched in Really Simple Security Plugin

Rare Case of Privilege Escalation Patched in LiteSpeed Cache Plugin

Monthly security advice

Website security

For plugin devs

For researchers

Resources

Patchstack

Socials

Website security

For plugin devs

For researchers

Resources

Patchstack

Socials