Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Several security vulnerabilities were discovered in Wordpress, a popular content management framework. Server Side Request Forgery and cross-site scripting (XS…
**Wordpress 5.9.4 Security Release**
[WordPress 6.0.2 Security and Maintenance Release](https://wordpress.org/news/2022/08/wordpress-6-0-2-security-and- maintenance-release/)
A zero-day vulnerability in the WPGateway WordPress plugin recently surfaced online following active exploits. The…Actively Exploited Zero-Day Vulnerability Fo…
Researchers discovered a severe blind SSRF vulnerability in WordPress that could allow DDoS attacks. Notably,…Six-Year-Old Blind SSRF Vulnerability Risks WordP…
A severe zero-day vulnerability in the Backup Buddy plugin has been revealed. The researchers detected…Zero-Day Vulnerability Found In WordPress Plugin Backup …
Researchers from Wordfence havesoundedthe alarm about a "sudden" spike in cyber attacks attempting to exploit an unpatched flaw in a WordPress plugin calledKas…
A security researcher has shared two CSP bypass scenarios affecting WordPress websites. Both methods involve…Researcher Discloses A WordPress CSP Bypass Public…
Researchers discovered multiple security vulnerabilities in the Jupiter WordPress theme. While vendors have patched the…Multiple Vulnerabilities Found In Jupit…
Several vulnerabilities like Prototype Pollution Vulnerability in a jQuery dependency and in the block editor, and Stored Cross Site Scripting Vulnerability we…
WordPress 5.9.2 Security & Maintenance Release
WordPress 5.8.4 Security Release
A severe vulnerability in the UpdraftPlus WordPress plugin could expose backups to subscribers. Thankfully, the…Vulnerability In UpdraftPlus WordPress Plugin C…
Researchers discovered a number of severe security bugs leading to code execution in the WordPress…Critical Code Execution Bugs Found In PHP Everywhere WordPre…
A serious code injection vulnerability riddled the WordPress HTML Mail plugin, thus potentially putting thousands…Code Injection Vulnerability Found In HTML Ma…
Several vulnerabilities were discovered in Wordpress, a web blogging tool. They allowed remote attackers to perform SQL injection, run unchecked SQL queries, b…
Researchers have disclosed a security shortcoming affecting three different WordPress plugins that impact over 84,000 websites and could be abused by a malicio…
Several vulnerabilities were discovered in Wordpress, a web blogging tool. They allowed remote attackers to perform SQL injection, run unchecked SQL queries, b…
A security researcher discovered a serious subdomain takeover vulnerability in the WordPress hosting platform Flywheel.…Subdomain Takeover Flaw Affected Flywhe…
In a recent wave of attacks, hackers targeted 1.6 million WordPress sites by exploiting unpatched…Hackers Attacked 1.6 Million WordPress Sites Via Four Differe…
Numerous vulnerabilities in Hide My WP plugin WordPress plugin could pose serious security risks to…Multiple Vulnerabilities Spotted In Hide My WP WordPress Pl…
Upstream announcement: [WordPress 5.8.2 Security and Maintenance Release](https://wordpress.org/news/2021/11/wordpress-5-8-2-security-and- maintenance-release/)
Upstream announcement: [WordPress 5.8.2 Security and Maintenance Release](https://wordpress.org/news/2021/11/wordpress-5-8-2-security-and- maintenance-release/)
Upstream announcement: [WordPress 5.8.2 Security and Maintenance Release](https://wordpress.org/news/2021/11/wordpress-5-8-2-security-and- maintenance-release/)
