BdThemes' compromised JSON feed exploits XSS in seven WordPress plugins, creating rogue admins and installing a PHP web shell without plugin updates.

Wordfence was notified of the compromise on August 7 and published its analysis the following day. It affects BdThemes, an Elementor add-on vendor whose plugins are distributed through the official ...

The WP2Shell vulnerability chain affects over 500 million sites. How it was discovered says more about the future of cybersecurity than the bug itself. The post The $25 AI Exploit That Exposed A ...

By chaining an SQL injection and an API vulnerability, attackers can inject code. WordPress has released an update, the finders a hotfix.

A critical authentication bypass vulnerability in the Python.org release management API was responsibly disclosed and patched earlier this year, potentially allowing attackers to manipulate download ...

WordPress 7.0 "Armstrong," released May 20, 2026, arrived without the real-time collaborative editing feature that had been its stated centerpiece for months — and within two days of launch, a ...

Oliver Sild, founder of Patchstack WordPress security company, shared concerns about the security of AI API keys in WordPress 7.0, sharing that there “will be an absolute rush by hackers to steal API ...

This repository is provided for research and defensive security purposes only. The author assumes no responsibility for misuse of this information. includes/Frontend ...

A critical security flaw found in a widely used WordPress plugin is putting thousands of websites at serious risk worldwide. Tracked as CVE-2026-1492, this vulnerability affects the User Registration ...

A newly disclosed flaw, tracked as CVE-2026-1492, affects the User Registration & Membership plugin for WordPress, introducing a critical vulnerability that allows unauthenticated attackers to bypass ...

WordPress powers roughly 43% of all websites on the internet, yet most developers still manage their sites by clicking through the WP-Admin dashboard as if it were 2012. The WordPress REST API shipped ...

GRAND RAPIDS, Mich — Wednesday marked the grand opening of the new Pine Rest Pediatric Center of Behavioral Health. It's a full facility to help children through mental health care. The need for such ...