Security advisories

Author's position will be here

Security advisories

Latest WordPress how-to's Plugin recommendations Interview WordPress Security Virtual Patches Security advice Security advisories Patchstack news Patchstack how-to's

21 November, 2024

Unauthenticated Arbitrary File Read Vulnerability in Jobify Theme

                Critical Vulnerability            

                ENVATO            

                File Read            

14 November, 2024

Critical Account Takeover Patched in Really Simple Security Plugin

                Critical Vulnerability            

                account takeover            

                Really Simple Security            

29 October, 2024

Rare Case of Privilege Escalation Patched in LiteSpeed Cache Plugin

                LiteSpeed Cache            

                zeroday            

                privilege escalation            

18 October, 2024

Security implications of WordPress repository access restrictions and plugin closures

17 October, 2024

Critical Vulnerabilities in Ultimate Membership Pro Plugin

                privilege escalation            

                php object injection            

2 October, 2024

Unauthenticated Stored XSS Vulnerability in LiteSpeed Cache Plugin Affecting 6+ Million Sites

                xss            

                unauthenticated            

                LiteSpeed Cache            

25 September, 2024

Unpatched SQL Injection Vulnerability in TI WooCommerce Wishlist Plugin

                Critical Vulnerability            

                SQL Injection            

                ENVATO            

23 September, 2024

Privilege Escalation Vulnerability Patched in Houzez Theme

                privilege escalation            

                theme            

                Houzez            

12 September, 2024

SQL Injection Vulnerabilities Found in ListingPro Theme and Plugin

                Critical Vulnerability            

                SQL Injection            

                ENVATO            

Critical Privilege Escalation in LiteSpeed Cache Plugin Affecting 5+ Million Sites

5 September, 2024

Critical Account Takeover Vulnerability Patched in LiteSpeed Cache Plugin

                Critical Vulnerability            

                account takeover            

                LiteSpeed Cache            

21 August, 2024

Critical Privilege Escalation in LiteSpeed Cache Plugin Affecting 5+ Million Sites

                Critical Vulnerability            

                privilege escalation            

                LiteSpeed Cache            

                zeroday

13 July, 2024

Critical Vulnerability Patched in Backup and Staging by WP Time Capsule Plugin

1 2 3 … 8 Next »

Security advisories

Security advisories

Unauthenticated Arbitrary File Read Vulnerability in Jobify Theme

Critical Account Takeover Patched in Really Simple Security Plugin

Rare Case of Privilege Escalation Patched in LiteSpeed Cache Plugin

Security implications of WordPress repository access restrictions and plugin closures

Critical Vulnerabilities in Ultimate Membership Pro Plugin

Unauthenticated Stored XSS Vulnerability in LiteSpeed Cache Plugin Affecting 6+ Million Sites

Unpatched SQL Injection Vulnerability in TI WooCommerce Wishlist Plugin

Privilege Escalation Vulnerability Patched in Houzez Theme

SQL Injection Vulnerabilities Found in ListingPro Theme and Plugin

Critical Account Takeover Vulnerability Patched in LiteSpeed Cache Plugin

Critical Privilege Escalation in LiteSpeed Cache Plugin Affecting 5+ Million Sites

Critical Vulnerability Patched in Backup and Staging by WP Time Capsule Plugin

Weekly security advice

Website security

For plugin devs

For researchers

Resources

Patchstack

Socials

Website security

For plugin devs

For researchers

Resources

Patchstack

Socials