Security News

The malware does its best to obfuscate SEO injection in WordPress and evade notice from web admins.

Privilege escalation vulnerabilities in WordPress allow attackers to access features that were intended for administrators only, RIPS Tech security researchers say.  read more

One bug accidentally allowed Google to index user passwords.

Don't delay, update your Wordpress website today.

WordPress developers announced on Thursday the availability of version 5.0.1 of the content management system (CMS), which addresses several types of vulnerabilities. read more

Here's the latest Naked Security podcast - enjoy!

Attackers have infected 20,000 WordPress sites by brute-forcing administrator usernames and passwords.

Researchers identified a widespread campaign of brute force attacks against WordPress websites.

Recently patched vulnerabilities in the popular AMP for WP plugin are being targeted in an active Cross-Site Scripting (XSS) campaign, Wordfence reports.  read more

The popular plugin for implementing Accelerated Mobile Pages returned, patched, to WordPress.org last week.