in Security
Over 80 WPFactory Plugins Closed On WordPress.org After Suspected Backdoor In Premium Plugin
After a user reported a security issue in the Pro version of WPFactory’s EU/UK VAT[…]
Security
Latest posts
- in Security
How CaptainCore Drift Uncovered a Nulled Plugin Ring
I manage around 3,000 WordPress sites. Paid plugins often get stuck on old versions. Bad[…]
- in Security
How to Find Vulnerabilities in WordPress Plugins with Static Analysis and AI Tools
In this blog we will talk about how to easily find vulnerabilities in WordPress plugins[…]
- in Security
Someone Bought 30 WordPress Plugins and Planted a Backdoor in All of Them
Last week, I wrote about catching a supply chain attack on a WordPress plugin called[…]
- in Security
Malware Intercepts Googlebot via IP-Verified Conditional Logic
Some attackers are increasingly moving away from simple redirects in favor of more “selective” methods[…]
- in Security
WordPress Auto-Login Backdoor Disguised as JavaScript Data File
During a recent investigation, we discovered a sophisticated WordPress backdoor hidden in what appears to[…]
- in Security
Locking Down the WordPress Login Page
Due to its flexibility, ease of use, and massive plugin ecosystem, WordPress is a favorite[…]
WP Password Policy Review: Strengthen WordPress Security With Enforced Password Standards
Users create weak passwords all the time and can leave your site vulnerable. This WP[…]
- in Security
Debunking WordPress Security Myths: What Developers Often Miss
The staggering number of sites powered by WordPress speaks to its versatility, ease of use,[…]
NEW: Patchstack AI code review tool and Security Suite for plugin vendors
Today, we are super excited to launch the new version of the Patchstack mVDP platform,[…]
- in Security
Patchstack managed VDP report forwarding
As the leading threat intelligence provider in the WordPress ecosystem, Patchstack has more experience with[…]
WP Umbrella Partners with Patchstack for Real-Time Vulnerability Protection
WP Umbrella is now protecting users in real-time with Patchstack’s integration! Here’s how it helps[…]
- in Security
Debunking WordPress Security Myths: What Developers Often Miss
The staggering number of sites powered by speaks to its versatility, ease of use, and[…]
- in Security
Wordfence: The World’s Leading Quality WordPress Vulnerability Intelligence Provider
Today, we’re examining Wordfence’s vulnerability data for 2024 and 2025, and comparing it to other[…]
- in Security, WooCommerce
Phishing campaign targeting WooCommerce stores
Developer advisory: We’re seeing phishing emails targeting WooCommerce stores. Emails from security-woocommerce.com, notify-woocommerce.com, and support-woocommerce.com[…]
- in Security
Nearly 1000 Plugins Closed During WordPress Security Cleanup
Patchstack is always looking for new ways to make the WordPress ecosystem safer by organizing[…]
- in Security
Rare Case of Privilege Escalation Patched in LiteSpeed Cache Plugin
A vulnerability in LiteSpeed Cache allowed unauthorized admin access; fixed in version 6.5.2, with Patchstack[…]
- in Security
Critical Vulnerabilities in Ultimate Membership Pro Plugin
Critical vulnerabilities discovered in Ultimate Membership Pro – update to version 12.8+ to safeguard your[…]
- in Security
Stored XSS Vulnerability in LiteSpeed Cache Plugin
There is an unauthenticated stored XSS Vulnerability in LiteSpeed Cache Plugin affecting 6+ million sites.[…]
Website security checks – WP-CLI for site owners and administrators
For website owners and administrators, ensuring site security is crucial, and WP-CLI offers a powerful[…]
