🎉 NEW: Community IP Blocklist – automatically block IPs known to exploit vulnerabilities!

Security Advisories

Author's position will be here

Security Advisories

Latest WordPress How-To's Security Advice Security Advisories Patchstack News Patchstack How-To's

31 January, 2024

WordPress 6.4.3 Security Release

wordpress

9 January, 2024

AI Engine Plugin Affected by Critical Vulnerability

                Critical Vulnerability            

                arbitrary file upload            

                AI Engine            

20 December, 2023

Critical SQL Injection Found in Porto Theme's Plugin

                Critical Vulnerability            

                SQL Injection            

                Porto            

                Premium Theme

12 December, 2023

Multiple Vulnerabilities Patched in Themify Ultra Theme

                privilege escalation            

                arbitrary file upload            

                php object injection            

                theme            

                themify            

                settings change

8 December, 2023

Critical Vulnerability in Elementor Affecting 5+ Million Websites

                Critical Vulnerability            

                Elementor            

                arbitrary file upload            

6 December, 2023

WordPress 6.4.2 Security Release

wordpress

3 December, 2023

Fake CVE Phishing Campaign Tricks WordPress Users Into Installing Malware

                CVE-2023-45124            

                CVE            

Thrive Theme : Dismiss Tooltip to Privilege Escalation

29 November, 2023

Thrive Theme Vulnerability: Dismiss Tooltip to Privilege Escalation

                privilege escalation            

                thrive            

                theme            

Authenticated Stored XSS vulnerability in WooCommerce and Jetpack Plugin

15 November, 2023

Authenticated Stored XSS in WooCommerce and Jetpack Plugin

                xss            

                woocommerce            

                jetpack            

8 November, 2023

Arbitrary Attachment Render to XSS in Elementor Plugin

                Elementor            

                xss            

wordpress 6-3-2 security update technical analysis by patchstack

13 October, 2023

WordPress Core 6.3.2 Security Update - Technical Advisory

                WordPress core            

                security release            

12 October, 2023

Pre-Auth Arbitrary File Upload in User Submitted Posts Plugin

Critical Vulnerability

1 2 3 … 6 Next »

Looks like your browser is blocking our support chat widget. Turn off adblockers and reload the page.

Reload page

Security Advisories

Security Advisories

WordPress 6.4.3 Security Release

AI Engine Plugin Affected by Critical Vulnerability

Critical SQL Injection Found in Porto Theme's Plugin

Multiple Vulnerabilities Patched in Themify Ultra Theme

Critical Vulnerability in Elementor Affecting 5+ Million Websites

WordPress 6.4.2 Security Release

Fake CVE Phishing Campaign Tricks WordPress Users Into Installing Malware

Thrive Theme Vulnerability: Dismiss Tooltip to Privilege Escalation

Authenticated Stored XSS in WooCommerce and Jetpack Plugin

Arbitrary Attachment Render to XSS in Elementor Plugin

WordPress Core 6.3.2 Security Update - Technical Advisory

Pre-Auth Arbitrary File Upload in User Submitted Posts Plugin

Protection

Solutions

Bug bounty

Resources

Patchstack

Protection

Solutions

Bug bounty

Resources

Patchstack