Security Advisories

Author's position will be here

Security Advisories

Latest WordPress Security 101 Plugin Recommendations Security Advisories Patchstack News Case Studies Bug Bounty

16 July, 2025

Account Takeover Vulnerability Patched in Password Policy Manager Plugin

                Critical Vulnerability            

                account takeover            

11 July, 2025

Malware Found in Official GravityForms Plugin Indicating Supply Chain Breach

                supply chain attack            

                gravityforms            

                malware            

9 June, 2025

Account Takeover Vulnerability in PayU CommercePro Plugin

                Critical Vulnerability            

                account takeover            

27 May, 2025

Unpatched Critical Vulnerability in TI WooCommerce Wishlist Plugin

                Critical Vulnerability            

                arbitrary file upload            

15 May, 2025

Critical Privilege Escalation Vulnerability Patched in Eventin Plugin

                eventin            

                vulnerability            

                privilege escalation            

5 May, 2025

Additional Critical OttoKit (Formerly SureTriggers) Vulnerability Patched

                vulnerability            

                privilege escalation            

                ottokit            

23 April, 2025

Fake Security Vulnerability Phishing Campaign Targets WooCommerce Users

                woocommerce            

                phishing            

17 April, 2025

Critical RomethemeKit For Elementor Plugin Vulnerability Patched

                rce            

                Critical Vulnerability            

                Elementor            

10 April, 2025

Critical SureTriggers Plugin Vulnerability Exploited within 4 hours

                Critical Vulnerability            

                SureTriggers            

                Rest API            

20 March, 2025

Critical LFI to RCE Vulnerability in WP Ghost Plugin Affecting 200k+ Sites

                lfi            

                alliance            

                Critical Vulnerability            

                rce

5 March, 2025

Unauthenticated Arbitrary File Upload Vulnerability in Chaty Pro Plugin

                Critical Vulnerability            

                arbitrary file upload            

                chaty-pro            

                Malicious File Upload

24 February, 2025

Reflected XSS Patched in Essential Addons for Elementor Affecting 2+ Million Sites

                Essential Addons for Elementor            

                Elementor            

                xss            

« Previous 1 2 3 4 … 11 Next »

Security Advisories

Security Advisories

Account Takeover Vulnerability Patched in Password Policy Manager Plugin

Malware Found in Official GravityForms Plugin Indicating Supply Chain Breach

Account Takeover Vulnerability in PayU CommercePro Plugin

Unpatched Critical Vulnerability in TI WooCommerce Wishlist Plugin

Critical Privilege Escalation Vulnerability Patched in Eventin Plugin

Additional Critical OttoKit (Formerly SureTriggers) Vulnerability Patched

Fake Security Vulnerability Phishing Campaign Targets WooCommerce Users

Critical RomethemeKit For Elementor Plugin Vulnerability Patched

Critical SureTriggers Plugin Vulnerability Exploited within 4 hours

Critical LFI to RCE Vulnerability in WP Ghost Plugin Affecting 200k+ Sites

Unauthenticated Arbitrary File Upload Vulnerability in Chaty Pro Plugin

Reflected XSS Patched in Essential Addons for Elementor Affecting 2+ Million Sites

Monthly security advice

Website security

For plugin devs

For researchers

Resources

Patchstack

Socials

Website security

For plugin devs

For researchers

Resources

Patchstack

Socials