FeaturedJuly 10, 2026
The latest WordPress security news and insights
Featured articles
Security AdvisoriesApril 15, 2026
Critical Supply Chain Compromise on 20+ Plugins by EssentialPlugin
Security AdvisoriesApril 9, 2026
Critical Supply Chain Compromise in Smart Slider 3 Pro: Full Malware Analysis
Latest articles
Security AdvisoriesSeptember 25, 2026
Cross-Site Request Forgery in Elementor Plugin Affecting 2 Million+ Sites
Security AdvisoriesSeptember 22, 2026
CVE-2026-87902: Attackers Started Probing WordPress Sites Hours After the Patch
UncategorizedSeptember 22, 2026
WordPress 7.1.2 Security Release: Unauthenticated LFI to RCE
UncategorizedSeptember 18, 2026
Click2Shell: The RCE WordPress 7.1.1 Just Patched
Patchstack NewsSeptember 18, 2026
Patchstack Now Protects Your AI-Built Apps
Bug BountySeptember 18, 2026
WordPress 7.1.1 Maintenance and Security Release
UncategorizedSeptember 11, 2026
Launching managed CRA Article 14 reporting for open source maintainers
UncategorizedAugust 28, 2026
Unauthenticated PHP Object Injection to Remote Code Execution on GiveWP
Case StudiesAugust 24, 2026
