WordPress is one of the most widely-used Content Management Systems on the planet. With over 43% of websites using the platform, it’s no surprise that it has a target on its back. That not only means ...

A WordPress plug-in installed on more than 4 million websites exposes them to full administrative takeover through a scripting flaw that potentially can be used to launch large-scale automated attacks ...

WordPress security company Wordfence issued an advisory that recommended being vigilant for an increase in hacking activity after Russian attack on Ukraine and offered tips to help prevent becoming a ...

A threat actor or actors has compromised multiple plug-ins on the WordPress.org site with code aimed at giving attackers administrative privileges as well as conducting further malicious activity. Of ...

A critical vulnerability in the Ninja Forms File Uploads premium add-on for WordPress allows uploading arbitrary files ...

Vulnerable code has been discovered in the payment solution plugin WooCommerce for the WordPress content management system (CMS) that could allow an unauthenticated attacker to gain administrative ...

There are eight fundamental actions that all WordPress publishers should consider in order to mitigate malicious activities and vulnerabilities. Following these best practices will help ensure that a ...