wordpress

CVE-2026-87902, a new critical vulnerability in the WordPress core, is already being actively exploited in real-world attacks.

WordPress sites are increasingly becoming targets of attacks exploiting vulnerabilities in plugins and themes. In this post, we examine recent cases and share protection tips.

Since 2016, a threat actor has been exploiting insecure plugins and themes to infect WordPress websites and redirect traffic to malicious websites.

A vulnerability that permits bypassing authentication has been found in a popular security hardening plugin for WordPress.

Typical security issues of WordPress, and how they can be addressed to protect your website or online store from cybercriminals.

Why criminals want to hack your website, how they might use it in new attacks, and how to stop them.

Scammers want to steal your passwords and financial data with fake websites. But where do they host them, and how to spot a fake?

Over the first week of 2016, a handful of important cybersecurity news came in, including those directly and indirectly affecting businesses worldwide.

Since mid-October, several major software vendors have released a number of security announcements and updates, most of them serious or outward critical.

Infosec digest: exploit kit Neutrino in Wordpress, yet another GitHub DDoS, Wyndham responsible for breach, while Target is not.

A third-party plugin for WordPress CMS – RevSlider – made vulnerable up to 100K WordPress-based sites, with more than 10K blocked by Google for re-distributing malware they fell victims prior

WordPress has become one of the more popular web platforms, both for personal and professional websites, because it is simple to use and yet very flexible. But this popularity also