The latest WordPress security news and insights

Featured articles

12 November, 2025

PHP Object Injection Vulnerability in MediCenter Theme Affecting 10k+ Sites

                Critical Vulnerability            

                php object injection            

30 October, 2025

Two Critical Vulnerabilities in WordPress King Addons for Elementor Plugin Affecting 10k+ Sites

                Critical Vulnerability            

                privilege escalation            

                arbitrary file upload            

9 October, 2025

PHP Object Injection Patched in Quiz and Survey Master Plugin Affecting 40k+ Sites

                Critical Vulnerability            

                php object injection            

12 August, 2025

Multiple Critical Vulnerabilities Patched in WP Job Portal Plugin

                Critical Vulnerability            

                SQL Injection            

                Arbitrary File Download            

6 August, 2025

Is Drupal CMS a good alternative to WordPress? With Steve Persch of Pantheon

                pantheon            

                drupal            

6 August, 2025

How Agencies Can Operate Like Startups Inside Enterprises with Karim Marucchi of Crowd Favorite

Crowd Favorite

6 August, 2025

Critical Vulnerability Impacting Over 100K Sites Patched in Everest Forms Plugin

                Critical Vulnerability            

                php object injection            

patchstack introduces rapidmitigate - the next generation wordpress vulnerability mitigation system

1 August, 2025

RapidMitigate: Next-gen vulnerability mitigation for websites

30 July, 2025

Security as Added Value: WP Umbrella Unlocks Additional Revenue in 3 Weeks

30 July, 2025

Unauthenticated Arbitrary File Deletion Vulnerability in Litho Theme

                vpatch            

                litho theme            

                Critical Vulnerability            

                arbitrary file deletion            

                zeroday

23 July, 2025

Account Takeover Vulnerability Affecting Over 400K Installations Patched in Post SMTP Plugin

                Critical Vulnerability            

                account takeover            

                0day            

WP Umbrella integrates Patchstack - a case study in converting 4.5% of all sites and unlocking new revenue

16 July, 2025

Case study: WP Umbrella Converts 4.5% of Sites to Patchstack in First 4 Weeks, Opening a New Revenue Stream

16 July, 2025

Account Takeover Vulnerability Patched in Password Policy Manager Plugin

                Critical Vulnerability            

                account takeover            

11 July, 2025

Malware Found in Official GravityForms Plugin Indicating Supply Chain Breach

                supply chain attack            

                gravityforms            

                malware            

9 July, 2025

Patchstack managed VDP report forwarding

mvdp

« Previous 1 2 3 4 5 … 36 Next »

The latest WordPress security news and insights

Featured articles

PHP Object Injection Vulnerability in MediCenter Theme Affecting 10k+ Sites

Two Critical Vulnerabilities in WordPress King Addons for Elementor Plugin Affecting 10k+ Sites

PHP Object Injection Patched in Quiz and Survey Master Plugin Affecting 40k+ Sites

Monthly security advice

Multiple Critical Vulnerabilities Patched in WP Job Portal Plugin

Is Drupal CMS a good alternative to WordPress? With Steve Persch of Pantheon

How Agencies Can Operate Like Startups Inside Enterprises with Karim Marucchi of Crowd Favorite

Critical Vulnerability Impacting Over 100K Sites Patched in Everest Forms Plugin

RapidMitigate: Next-gen vulnerability mitigation for websites

Security as Added Value: WP Umbrella Unlocks Additional Revenue in 3 Weeks

Unauthenticated Arbitrary File Deletion Vulnerability in Litho Theme

Account Takeover Vulnerability Affecting Over 400K Installations Patched in Post SMTP Plugin

Case study: WP Umbrella Converts 4.5% of Sites to Patchstack in First 4 Weeks, Opening a New Revenue Stream

Account Takeover Vulnerability Patched in Password Policy Manager Plugin

Malware Found in Official GravityForms Plugin Indicating Supply Chain Breach

Patchstack managed VDP report forwarding

Website security

For plugin devs

For researchers

Resources

Patchstack

Socials

Website security

For plugin devs

For researchers

Resources

Patchstack

Socials