Security advisories

Author's position will be here

Security advisories

Latest WordPress Security Virtual Patches WordPress how-to's Plugin recommendations Interview Security advice Security advisories Patchstack news Patchstack how-to's

wordpress 6-3-2 security update technical analysis by patchstack

1 July, 2024

WordPress Core 6.5.5 Security Update – Technical Advisory

                WordPress core            

                security release            

6 June, 2024

Multiple Vulnerabilities in WooCommerce Amazon Affiliates Plugin

                arbitrary option update            

                WZone            

                ENVATO            

                privilege escalation            

                SQL Injection

28 May, 2024

Unauthenticated XSS Vulnerability Patched in Slider Revolution Plugin

                Audit            

                xss            

                Slider Revolution            

22 May, 2024

Critical Vulnerability Patched in UserPro Plugin

                Critical Vulnerability            

                privilege escalation            

                account takeover            

                UserPro

Exploring the Unknown: Beneath the Surface of the Unpatched WordPress SSRF - Patchstack analysis

17 May, 2024

Exploring the Unknown: Beneath the Surface of Unpatched WordPress SSRF

                WordPress core            

                ssrf            

14 May, 2024

Critical Vulnerabilities Found in XStore Theme and Plugin

                php object injection            

                SQL Injection            

                arbitrary option update            

                XStore            

                Critical Vulnerability            

                account takeover

7 May, 2024

High Priority Vulnerabilities Patched in Uncode Core Plugin

                plugin            

                privilege escalation            

                Uncode            

                arbitrary file deletion

4 April, 2024

Unpatched Authenticated RCE in Oxygen and Breakdance Builder

                remote code execution            

                privilege escalation            

                rce            

                oxygen            

                breakdance

3 April, 2024

Critical Vulnerabilities Patched in REHub Theme and Plugin

                Critical Vulnerability            

                SQL Injection            

                REHub            

                Local File Inclusion

19 March, 2024

Critical Vulnerabilities Patched in WordPress Automatic Plugin

                Critical Vulnerability            

                ssrf            

                SQL Injection            

                Automatic            

                Arbitrary File Download

12 March, 2024

Critical Vulnerability Found in GOTMLS Plugin

                rce            

                Critical Vulnerability            

27 February, 2024

XSS Vulnerability in LiteSpeed Cache Plugin Affecting 4+ Million Sites

                xss            

                LiteSpeed Cache            

« Previous 1 2 3 4 … 8 Next »

Security advisories

Security advisories

WordPress Core 6.5.5 Security Update – Technical Advisory

Multiple Vulnerabilities in WooCommerce Amazon Affiliates Plugin

Unauthenticated XSS Vulnerability Patched in Slider Revolution Plugin

Critical Vulnerability Patched in UserPro Plugin

Exploring the Unknown: Beneath the Surface of Unpatched WordPress SSRF

Critical Vulnerabilities Found in XStore Theme and Plugin

High Priority Vulnerabilities Patched in Uncode Core Plugin

Unpatched Authenticated RCE in Oxygen and Breakdance Builder

Critical Vulnerabilities Patched in REHub Theme and Plugin

Critical Vulnerabilities Patched in WordPress Automatic Plugin

Critical Vulnerability Found in GOTMLS Plugin

XSS Vulnerability in LiteSpeed Cache Plugin Affecting 4+ Million Sites

Weekly security advice

Website security

For plugin devs

For researchers

Resources

Patchstack

Socials

Website security

For plugin devs

For researchers

Resources

Patchstack

Socials