Astro + WPGraphQL for more secure WordPress sites
WordPress powers over 43% of the web, and that makes it a prime target for hackers and bots. But […]
Security
Latest posts
in SecurityPatchstack Tracks 328% More Security Bugs Reported in WordPress Plugins in 2022
Patchstack, a WordPress security maintenance and management tool, has published its “State of WordPress Security”[…]
- in Security
All In One SEO Pack Vulnerabilities Impacting 3 Million Sites Patched
On January 26, 2023, the Wordfence Team responsibly disclosed two vulnerabilities in All In One[…]
- in Security
GoDaddy says a multi-year breach hijacked customer websites and accounts
Three breaches over as many years all carried out by the same threat actor.
- in Security
Multiple Authenticated SQL Injection Fixed In WP Statistics Plugin Version
If you’re a WP Statistics user, please update the plugin to at least version13.2.11. Patchstack[…]
- in Security
Massive Campaign Uses Hacked WordPress Sites as Platform for Black Hat Ad Network
Since late December, our team has been tracking a new spike in WordPress website infections[…]
How to scan your WordPress instances for Security Issues using WPScan
The WPScan security scanner was developed primarily for WordPress administrators and security teams to evaluate[…]
- in Security
Fake plugin affecting WordPress sites
Bad actors are abusing leaked and compromised credentials to install core-stab fake plugin on WordPress[…]
- in Security
Multiple Vulnerabilities Affecting Multiple MainWP Extensions
Introduction At Patchstack we accept vulnerability reports from individual researchers but also do our own[…]
- in Security
Linux backdoor malware infects WordPress-based websites
Doctor Web has discovered a malicious Linux program that hacks websites based on a WordPress[…]
- in Security
December WordPress Bug Hunting Challenge has a $4300 prize-pool
We are beyond excited to celebrate the winter holidays and launch of Patchstack Alliance Discord[…]
- in Security
Wordfence Launches Free Vulnerability Database For Commercial Use
Today we are incredibly excited to announce that Wordfence is launching an entirely free vulnerability[…]
WordPress To Drop Security Updates for Versions 3.7 Through 4.0 by December, 2022
WordPress’ Security Team announced it will be dropping support for versions 3.7 through 4.0 on[…]
- in Security
WordPress Core 6.0.2 Security & Maintenance Release – What You Need to Know
On August 30, 2022, the WordPress core team released WordPress version 6.0.2, which contains patches[…]
- in Security
Fake DDoS Pages On WordPress Sites Lead to Drive-By-Downloads
It’s not uncommon for users to experience “DDoS Protection” pages when casually browsing the web.[…]
- in Security
Cross-Site Request Forgery Vulnerability Patched in Ecwid Ecommerce Shopping Cart Plugin
On June 24, 2022, the Wordfence Threat Intelligence team initiated the responsible disclosure process for[…]
- in Security
High Severity Vulnerability Patched in Download Manager Plugin
On July 8, 2022 the Wordfence Threat Intelligence team initiated the responsible disclosure process for[…]
- in Security
Infected WordPress Site Reveals Malicious C&C Script
Cryptomining infections accounted for less than 4% of total detections last year. Despite the fact[…]
- in Security
WordPress Security Case: How We Blocked 391 Hack Attempts On Our Website in Past 30 Days
The Brute Protection Technique is the 3 Step process to secure WordPress websites from hack,[…]
- in Security
Are Millions of WordPress Sites Really Under Attack?
Attempted attacks are just the background radiation of the internet – let’s look at practical[…]
