WordPress Security News & Updates

Analysis of the Fake WordPress CVE-2023-46182 Patch Plugin & Phishing Campaign

Denis Sinegubko

December 14, 2023

On December 1, 2023, several security researchers reported about a new phishing campaign targeting WordPress administrators. WordPress sites owners had started receiving emails from WordPress.com…

Read the Post

Critical RCE Vulnerability Patched in Backup Migration Plugin

Sucuri Malware Research Team

December 13, 2023

On December 6th, 2023, the WordPress plugin Backup Migration received a critical security patch for a remote code execution vulnerability. Details were released five days…

Read the Post

How to Scan WordPress for Vulnerabilities

WPScan Intro: How to Scan for WordPress Vulnerabilities

Rianna MacLeod

December 12, 2023

In this post, we will look at how to use WPScan as a WordPress vulnerability scanner. This security tool provides you with a better understanding…

Read the Post

November WordPress Vulnerability & Patch Roundup

WordPress Vulnerability & Patch Roundup November 2023

Sucuri Malware Research Team

November 24, 2023

Vulnerability reports and responsible disclosures are essential for website security awareness and education. Automated attacks targeting known software vulnerabilities are one of the leading causes…

Read the Post

WordPress Vulnerability & Patch Roundup October 2023

Cesar Anjos

October 30, 2023

Read the Post

How to Secure the WordPress Login Page

Rianna MacLeod

Last Updated: March 5, 2024

Given that WordPress powers millions of websites worldwide, it’s no surprise that it’s a prime target for malicious activities ranging from brute force attacks and…

Read the Post

Balada Injector Targets Unpatched tagDiv Plugin, Newspaper Theme & WordPress Admins

Denis Sinegubko

October 6, 2023

In the middle of September 2023, vulnerability advisory resources disclosed the details of an Unauthenticated Stored XSS vulnerability in the tagDiv Composer (the companion plugin…

Read the Post

Optimizing WordPress: Security Beyond Default Configurations

Ben Martin

October 3, 2023

Default configurations in software are not always the most secure. For example, you might buy a network-attached home security camera from your friendly neighborhood electronics…

Read the Post

September 2023 Theme Plugin Patch WordPress Vulnerability Roundup

WordPress Vulnerability & Patch Roundup September 2023

Cesar Anjos

September 28, 2023

Read the Post

What is Error Establishing a Database Connection and How to Fix it in WordPress

What Is ‘Error Establishing a Database Connection’ & How To Fix It in WordPress

Rianna MacLeod

September 26, 2023

Experiencing the ‘Error Establishing a Database Connection‘ on your WordPress website? This common error indicates that your site is unable to connect to its database,…

Read the Post

How to Find & Fix Japanese SEO Spam

Puja Srivastava

September 19, 2023

Japanese SEO Spam, also known as “Japanese keyword hack” or “Japanese SEO poisoning,” is a spammy search engine optimization technique used by black hat SEO…

Read the Post