WordPress Security News & Updates

WordPress Plugin & Theme Vulnerability & Patch Roundup June 2023

WordPress Vulnerability & Patch Roundup June 2023

Cesar Anjos
June 27, 2023

Vulnerability reports and responsible disclosures are essential for website security awareness and education. Automated attacks targeting known software vulnerabilities are one of the leading causes…

Read the Post

Remote Code Execution Backdoor Uses Unicode Obfuscation and Non-Standard File Extensions

Remote Code Execution Backdoor Uses Unicode Obfuscation & Non-Standard File Extensions

Ben Martin
June 22, 2023

Readers of this blog will know that attackers are constantly finding new ways to hide their malware and avoid detection; after all, that’s what good…

Read the Post

New WooCommerce Security Best Practices Guide

Rianna MacLeod
June 20, 2023

WooCommerce is a widely used e-commerce platform, powering nearly 6 million online stores worldwide. Its popularity makes it a prime target for cybercriminals looking to…

Read the Post

What are WordPress salts and security keys?

How to Generate WordPress Salts & Security Keys: Step by Step Instructions

Kaushal Bhavsar
June 13, 2023

In the realm of WordPress security, there’s a powerful tag team working tirelessly behind the scenes to safeguard your website’s login process. Meet salts and…

Read the Post

WP-CLI: How to Connect to WordPress via SSH

How to Update, Install & Remove WordPress Plugins & Themes With WP-CLI

Rianna MacLeod
June 1, 2023

WordPress, like other open-source content management systems, allows you to enhance your website’s appearance and functionality through custom code and third-party components like plugins and…

Read the Post

WordPress Vulnerability & Patch Roundup May 2023

Cesar Anjos
May 29, 2023

Read the Post

Vulnerability in Essential Addons for Elementor Leads to Mass Infection

Ben Martin
May 18, 2023

On May 11th, 2023, the very popular WordPress plugin Essential Addons for Elementor released a patch for a critical privilege escalation vulnerability, initially discovered by…

Read the Post

WordPress 6.2.1 Security & Maintenance Release

Cesar Anjos
May 17, 2023

On May 16, 2023, the WordPress core team released a crucial update — WordPress 6.2.1. This latest security and maintenance release addresses a number of…

Read the Post

Xjquery Wave of WordPress SocGholish Injections

Denis Sinegubko
May 9, 2023

In November, 2022, my colleague Ben Martin described how hackers were using zipped files and encrypted WordPress options stored in the database to inject SocGholish…

Read the Post

What is XML-RPC? Security Risks & How to Disable

Rianna MacLeod
May 4, 2023

XML-RPC is a protocol designed for WordPress to standardize communication between different systems, allowing external applications (such as other blogging platforms and desktop clients) to…

Read the Post

WP-CLI: How to Connect to WordPress via SSH

Rianna MacLeod
April 25, 2023

The WordPress admin dashboard, though intuitive and feature-rich, can be time-consuming to explore. If you’re looking for a more direct approach to website management, consider…

Read the Post