Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Researchers discovered multiple vulnerabilities in the LearnPress WordPress plugin, allowing SQL injection and file inclusion…LearnPress Plugin Vulnerabilities…
Heads up, WordPress admins! Researchers have warned users of a new Linux malware that targets…Linux Malware Exploits 30 Vulnerabilities To Target WordPress Web…
WordPress sites are being targeted by a previously unknown strain of Linux malware that exploits flaws in over two dozen plugins and themes to compromise vulne…
Several security vulnerabilities have been discovered in Wordpress, a popular content management framework. Possible SQL injection and cross-site scripting (XS…
Several security vulnerabilities were discovered in Wordpress, a popular content management framework. Server Side Request Forgery and cross-site scripting (XS…
A zero-day vulnerability in the WPGateway WordPress plugin recently surfaced online following active exploits. The…Actively Exploited Zero-Day Vulnerability Fo…
Researchers discovered a severe blind SSRF vulnerability in WordPress that could allow DDoS attacks. Notably,…Six-Year-Old Blind SSRF Vulnerability Risks WordP…
A severe zero-day vulnerability in the Backup Buddy plugin has been revealed. The researchers detected…Zero-Day Vulnerability Found In WordPress Plugin Backup …
Researchers from Wordfence havesoundedthe alarm about a "sudden" spike in cyber attacks attempting to exploit an unpatched flaw in a WordPress plugin calledKas…
Researchers discovered multiple security vulnerabilities in the Jupiter WordPress theme. While vendors have patched the…Multiple Vulnerabilities Found In Jupit…
Several vulnerabilities like Prototype Pollution Vulnerability in a jQuery dependency and in the block editor, and Stored Cross Site Scripting Vulnerability we…
A severe vulnerability in the UpdraftPlus WordPress plugin could expose backups to subscribers. Thankfully, the…Vulnerability In UpdraftPlus WordPress Plugin C…
Researchers discovered a number of severe security bugs leading to code execution in the WordPress…Critical Code Execution Bugs Found In PHP Everywhere WordPre…
A serious code injection vulnerability riddled the WordPress HTML Mail plugin, thus potentially putting thousands…Code Injection Vulnerability Found In HTML Ma…
Several vulnerabilities were discovered in Wordpress, a web blogging tool. They allowed remote attackers to perform SQL injection, run unchecked SQL queries, b…
Researchers have disclosed a security shortcoming affecting three different WordPress plugins that impact over 84,000 websites and could be abused by a malicio…
Several vulnerabilities were discovered in Wordpress, a web blogging tool. They allowed remote attackers to perform SQL injection, run unchecked SQL queries, b…
A security researcher discovered a serious subdomain takeover vulnerability in the WordPress hosting platform Flywheel.…Subdomain Takeover Flaw Affected Flywhe…
In a recent wave of attacks, hackers targeted 1.6 million WordPress sites by exploiting unpatched…Hackers Attacked 1.6 Million WordPress Sites Via Four Differe…
Numerous vulnerabilities in Hide My WP plugin WordPress plugin could pose serious security risks to…Multiple Vulnerabilities Spotted In Hide My WP WordPress Pl…
A major security flaw in Starter Templates Plugin could allow underprivileged authenticated users to import…Starter Templates Plugin Flaw Affected 1M+ WordPres…
WordPress admins have to deal with another vulnerable WordPress plugin that poses a highly severe…HashThemes Demo Importer Plugin Bug Could Allow Wiping WordPr…
Heads up, WordPress admins! The NextScripts WordPress plugin had a serious cross-site scripting vulnerability that…Cross-Site Scripting Vulnerability Riddled N…
A serious information disclosure bug existed in the WordPress plugin OptinMonster. Exploiting the vulnerability could…OptinMonster Plugin Bug Potentially Riske…
