Security Advisories

Author's position will be here

Security Advisories

Latest WordPress Security 101 Plugin Recommendations Security Advisories Patchstack News Case Studies Bug Bounty

15 May, 2025

Critical Privilege Escalation Vulnerability Patched in Eventin Plugin

                vulnerability            

                privilege escalation            

                eventin            

5 May, 2025

Additional Critical OttoKit (Formerly SureTriggers) Vulnerability Patched

                vulnerability            

                privilege escalation            

                ottokit            

23 April, 2025

Fake Security Vulnerability Phishing Campaign Targets WooCommerce Users

                woocommerce            

                phishing            

17 April, 2025

Critical RomethemeKit For Elementor Plugin Vulnerability Patched

                Critical Vulnerability            

                Elementor            

                rce            

10 April, 2025

Critical SureTriggers Plugin Vulnerability Exploited within 4 hours

                Critical Vulnerability            

                SureTriggers            

                Rest API            

20 March, 2025

Critical LFI to RCE Vulnerability in WP Ghost Plugin Affecting 200k+ Sites

                Critical Vulnerability            

                rce            

                lfi            

                alliance

5 March, 2025

Unauthenticated Arbitrary File Upload Vulnerability in Chaty Pro Plugin

                Critical Vulnerability            

                arbitrary file upload            

                chaty-pro            

                Malicious File Upload

24 February, 2025

Reflected XSS Patched in Essential Addons for Elementor Affecting 2+ Million Sites

                Essential Addons for Elementor            

                Elementor            

                xss            

20 February, 2025

Critical Privilege Escalation Patched in KLEO Theme's Plugin

                Critical Vulnerability            

                privilege escalation            

                ENVATO            

5 February, 2025

Rare Case of Privilege Escalation in ASE Plugin Affecting 100k+ Sites

                Critical Vulnerability            

                privilege escalation            

29 January, 2025

Privilege Escalation Vulnerability Patched in Better Find and Replace Plugin

                privilege escalation            

                zeroday            

                better find and replace            

22 January, 2025

Unauthenticated Privilege Escalation Vulnerability in RH - Real Estate Theme

                Critical Vulnerability            

                privilege escalation            

                ENVATO            

1 2 3 … 10 Next »

Security Advisories

Security Advisories

Critical Privilege Escalation Vulnerability Patched in Eventin Plugin

Additional Critical OttoKit (Formerly SureTriggers) Vulnerability Patched

Fake Security Vulnerability Phishing Campaign Targets WooCommerce Users

Critical RomethemeKit For Elementor Plugin Vulnerability Patched

Critical SureTriggers Plugin Vulnerability Exploited within 4 hours

Critical LFI to RCE Vulnerability in WP Ghost Plugin Affecting 200k+ Sites

Unauthenticated Arbitrary File Upload Vulnerability in Chaty Pro Plugin

Reflected XSS Patched in Essential Addons for Elementor Affecting 2+ Million Sites

Critical Privilege Escalation Patched in KLEO Theme's Plugin

Rare Case of Privilege Escalation in ASE Plugin Affecting 100k+ Sites

Privilege Escalation Vulnerability Patched in Better Find and Replace Plugin

Unauthenticated Privilege Escalation Vulnerability in RH - Real Estate Theme

Monthly security advice

Website security

For plugin devs

For researchers

Resources

Patchstack

Socials

Website security

For plugin devs

For researchers

Resources

Patchstack

Socials