Security News
Around 200,000 WordPress websites were impacted after a plugin they were using was updated to include malicious code, Wordfence reports. read more
Automattic has patched a reflected cross-site scripting vulnerability in the WooCommerce WordPress plugin.
Here’s an overview of some of last week’s most interesting news and articles: EV ransomware is targeting WordPress sites WordPress security outfit Wordfence has flagged several attempts by...
WordPress security outfit Wordfence has flagged several attempts by attackers to upload ransomware that provides them with the ability to encrypt a WordPress website’s files. They dubbed the...
A new type of attack against WordPress is targeting fresh installations to get admin access and execute PHP code in the victim’s web hosting account, Wordfence reveals. read more
Attackers have been carrying out WPSetup attacks, taking advantage of users who have installed WordPress but not yet configured it.
A SQL Injection vulnerability has been discovered in one of the most popular Wordpress plugins, installed on over 300,000 websites, which could be exploited by hackers to steal databases and...
WordPress fixed six vulnerabilities with version 4.7.5 and announced a bug bounty program with HackerOne this week.
WordPress Foundation is the latest organization to publicly announce a bug bounty program set up on the HackerOne platform. What’s in scope of the WordPress bug bounty program? Bounties will be...