WordPress Security News & Updates

WordPress Vulnerability & Patch Roundup December 2022

Rodrigo Escobar
December 28, 2022

Vulnerability reports and responsible disclosures are essential for website security awareness and education. Automated attacks targeting known software vulnerabilities are one of the leading causes…

Read the Post

How to Backup a WordPress Site for Free with WP-CLI

Rianna MacLeod
December 22, 2022

Regular website backups are the foundation of a solid website security plan. In the event of data loss or malware infection, restoring a WordPress backup…

Read the Post

Fake jQuery Domain Redirects Site Visitors to Scam Pages

Kayleigh Martin
December 20, 2022

A recent infection has been making its rounds across vulnerable WordPress sites, detected on over 160 websites so far at the time of writing. The…

Read the Post

Infected Plugins Redirect to Push Notification Scam

How to Fix & Remove the “Click Allow If You Are Not a Robot” Redirect

Eli Trevino
December 6, 2022

Attackers are always finding unique ways to avoid detection. Our teams regularly find malware on compromised websites which have been obfuscated to make it more…

Read the Post

WordPress Vulnerability and Patch Roundup November 2022

WordPress Vulnerability & Patch Roundup November 2022

Cesar Anjos
November 29, 2022

Read the Post

WP-CLI: How to Install WordPress via SSH

Rianna MacLeod
November 22, 2022

Sure, there are tons of one-click installers floating around for WordPress. But they’re not always the most secure option — and can still be tedious…

Read the Post

New SocGholish Malware Variant Uses Zip Compression & Evasive Techniques

Ben Martin
November 15, 2022

Readers of this blog should already be familiar with SocGholish: a widespread, years-long malware campaign aimed at pushing fake browser updates to unsuspecting web users.…

Read the Post

Massive ois[.]is Black Hat Redirect Malware Campaign

Ben Martin
November 8, 2022

Since September 2022, our research team has tracked a surge in WordPress malware redirecting website visitors to fake Q&A sites via ois[.]is. These malicious redirects…

Read the Post

WordPress Vulnerability & Patch Roundup October 2022

Rodrigo Escobar
October 28, 2022

Read the Post

Wordfence Evasion Malware Conceals Backdoors

Ben Martin
October 20, 2022

Malware authors, with some notable exceptions, tend to design their malicious code to hide from sight. The techniques they use help their malware stay on…

Read the Post

How to Securely Debug & Check WordPress Errors on Your Website

How to (Securely) Debug WordPress Errors on Your Website

Kaushal Bhavsar
October 13, 2022

While working on or maintaining your WordPress website, you’ll inevitably encounter an error that prevents it from properly functioning. Knowing how to securely debug and…

Read the Post