in Security
Wordfence Launches WordPress Superhero Challenge with Big Rewards
Wordfence has introduced an exciting new initiative, the WordPress Superhero Challenge, as part of its[…]
Security
Latest posts
Upcoming Security Changes for Plugin and Theme Authors on WordPress.org
WordPress.org is committed to protecting accounts that play a crucial role in the WordPress ecosystem.[…]
ACF 6.3.6 Security Release
Advanced Custom Fields version 6.3.6 is now available. This release contains important security fixes, along[…]
- in Security
Critical Privilege Escalation in LiteSpeed Cache Plugin
There is a critical vulnerability in the LiteSpeed Cache plugin – Unauth Privilege Escalation in[…]
- in Security
Critical Vulnerability in Elementor Affecting 5+ Million Websites
There is a critical security vulnerability in Elementor – an authenticated arbitrary file upload in[…]
- in Security
Fake CVE Phishing Campaign Tricks WordPress Users Into Installing Malware
For the past couple of days, the Patchstack team has been monitoring a mass-scale phishing[…]
- in Security
Wordfence Launches Bug Bounty Program to Fund WordPress Security Research and Showcase Researchers
At Defiant Inc and Wordfence, our mission is to Secure the Web. A critical component[…]
- in Security
4 Million WordPress Sites affected by Stored Cross-Site Scripting Vulnerability in LiteSpeed Cache Plugin
On August 14, 2023, our Wordfence Threat Intelligence team identified and began the responsible disclosure[…]
- in Security
How to Find & Fix Japanese SEO Spam
Japanese SEO Spam, also known as “Japanese keyword hack” or “Japanese SEO poisoning,” is a[…]
- in Security
The WordPress “Zombie” Plugins Pandemic Affects 1.6M+ Websites
The WordPress ecosystem is getting better with addressing security issues, but there is one big[…]
- in Security
2023 WordPress Security Survey – What we have learned
Melapress presents the results and findings of its WordPress Security Survey 2023 edition held online,[…]
- in Security
All-In-One Security Plugin Patches Sensitive Data Exposure Vulnerability in Version 5.2.0
All-In-One Security (AIOS), a plugin active on more than a million WordPress sites, was found[…]
- in Security, WooCommerce
Vulnerability patched in several WooCommerce Extensions for payment processing
On April 16, 2023, a vulnerability was discovered in the WooCommerce Stripe extension. Once the[…]
- in Security
#79 – Robert Abela on How to Keep Your WordPress Website Secure
On the podcast today we have Robert Abela. Robert is the CEO and founder of[…]
- in Security, WooCommerce
Vulnerability in WooCommerce Stripe Gateway Plugin
There is a security vulnerability in WooCommerce Stripe Gateway – an unauthenticated IDOR to PII[…]
- in Security
ACF Plugin’s Reflected XSS Vulnerability Attracts Exploit Attempts Within 24 Hours of Public Announcement
On May 5, Patchstack published a security advisory about a high severity reflected cross-site scripting[…]
- in Security
WordPress Server-Side Request Forgery (SSRF) Vulnerability
WordPress SSRF Attack In 2021, Microsoft released a security advisory warning of a critical SSRF[…]
- in Security
Advanced Custom Fields Plugins Contain Vulnerability, 2+ Million Sites Affected
If you’re a Advanced Custom Fields free and pro user, please update the plugin to[…]
- in Security
Massive Abuse of Abandoned Eval PHP WordPress Plugin
Attackers are always finding new and creative ways to compromise websites and maintain their foothold[…]
- in Security
WP Engine’s Security Team Creates Custom Workflow with WPScan to Protect Clients
How WP Engine automates security for over 1.5 million customer sites with WPScan. The Hero:[…]
